EUVD-2015-5667

Malware in sbrugna...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2024-58129

In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...

CVE-2019-10662

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:11+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2023-34634

creationtimestamp| type| source ---|---|--- 2023-08-01 22:58:33+00:00| seen| https://t.me/cibsecurity/67517 2023-08-17 14:46:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/greenshotdeserializecve202334634.rb 2023-08-18 09:13:05+00:00...

CVE-2023-33778

creationtimestamp| type| source ---|---|--- 2023-06-15 15:17:31+00:00| seen| MISP/3fc4f535-2faf-43c9-b690-2cf2251b598a...

CVE-2023-33009

creationtimestamp| type| source ---|---|--- 2023-05-24 16:26:54+00:00| seen| https://t.me/cibsecurity/64677 2023-05-25 19:04:24+00:00| seen| Telegram/o33eMMvV5GbS5yvZwxR9Wy9Vxsb16o4MXlOt7k80dQpLQ 2023-05-25 19:12:23+00:00| seen| https://t.me/KomunitiSiber/262 2023-05-26 18:40:05+00:00| seen|...

CVE-2023-28771

creationtimestamp| type| source ---|---|--- 2023-04-25 07:24:17+00:00| seen| https://t.me/cibsecurity/62787 2023-04-28 13:46:57+00:00| seen| https://t.me/thehackernews/3294 2023-04-28 15:59:01+00:00| seen| https://t.me/KomunitiSiber/124 2023-04-28 16:05:51+00:00| published-proof-of-concept|...

CVE-2020-25736

creationtimestamp| type| source ---|---|--- 2022-12-13 18:16:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/acronistrueimagexpcprivesc.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:26+00:00|...

CVE-2022-27593

creationtimestamp| type| source ---|---|--- 2022-09-12 15:41:46+00:00| exploited| https://t.me/ctinow/63043 2022-09-12 17:30:13+00:00| seen| https://t.me/cibsecurity/49451 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 11:52:27+00:00| seen|...

CVE-2022-0028

creationtimestamp| type| source ---|---|--- 2022-08-10 20:26:11+00:00| seen| https://t.me/cibsecurity/47870 2022-08-11 18:10:03+00:00| seen| https://t.me/truesecator/3282 2022-08-12 13:04:20+00:00| seen| https://t.me/itsecnews/1184 2022-08-23 13:21:28+00:00| exploited|...

CVE-2019-18818

creationtimestamp| type| source ---|---|--- 2022-06-18 10:22:36+00:00| published-proof-of-concept| https://t.me/arm1tage/129 2024-02-05 16:16:29+00:00| seen| https://t.me/ctinow/179297 2024-11-14 06:10:00+00:00| seen| MISP/e95bd878-d7d0-432b-98eb-5357f4615dad 2024-11-21 12:42:37+00:00| seen|...

Vulnerabilities fixed in MISP

Vulnerabilities have been fixed in MISP. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS. Remote code execution User Rights The developers of MISP have released a new versi...

CVE-2021-31755

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:21:42+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2970917 2025-01-26...

CVE-2021-35464

creationtimestamp| type| source ---|---|--- 2021-06-29 13:17:30+00:00| published-proof-of-concept| https://t.me/ptswarm/49 2021-07-01 13:37:04+00:00| seen| https://t.me/bhhub/416 2021-07-09 22:09:37+00:00| seen|...

CVE-2020-14882

creationtimestamp| type| source ---|---|--- 2020-10-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=521 2020-10-21 19:04:20+00:00| seen| https://t.me/cibsecurity/15466 2020-10-28 22:29:31+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/4841 2020-10-29...

CVE-2020-13383

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:24+00:00| seen|...

CVE-2020-12720

creationtimestamp| type| source ---|---|--- 2020-05-11 21:20:17+00:00| seen| https://t.me/thehackernews/694 2020-05-12 15:30:02+00:00| seen| https://t.me/SecLabNews/7557 2020-05-13 07:10:59+00:00| seen| https://t.me/informationsecuritychannel/37769 2020-05-15 08:42:43+00:00|...

CVE-2019-3929

creationtimestamp| type| source ---|---|--- 2019-12-17 14:15:18+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-01-14 14:39:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wepresentcmdinjection.rb 2020-01-15 00:00:00+00:00|...

CVE-2019-16662

creationtimestamp| type| source ---|---|--- 2019-11-03 12:10:08+00:00| published-proof-of-concept| https://t.me/antichat/6953 2019-11-03 13:03:58+00:00| seen| https://t.me/canyoupwnme/6111 2019-11-03 15:07:22+00:00| seen| https://t.me/DC8044Info/458 2019-11-06 19:54:12+00:00| seen|...