CVE-2020-25270

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:05+00:00| seen| MISP/0fb025a4-a6c5-4d49-b305-65264191024b...

CVE-2024-4610

creationtimestamp| type| source ---|---|--- 2024-06-09 12:23:00+00:00| exploited| https://t.me/HackingInsights/1986 2024-06-11 09:49:31+00:00| exploited| Telegram/6v1ahh7hPWOW8Ok3Sp4hG59yOTfaaNgCSzOLDB2lcLZIbY 2024-06-11 10:16:16+00:00| exploited|...

CVE-2023-22649

creationtimestamp| type| source ---|---|--- 2024-04-10 16:08:23+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/linux/gather/rancherauditlogleak.rb 2024-10-16 11:20:50+00:00| seen| https://t.me/cvedetector/8035 2025-02-06 03:13:45+00:00| seen|...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

PT-2024-23086 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.187 Description: The issue concerns a weak security check in the uploadLogo function within the OrganisationsController.php file. This function does not properly validate logo uploads. Recommendations: For versions...

CVE-2024-23296

creationtimestamp| type| source ---|---|--- 2024-03-05 21:26:36+00:00| seen| https://t.me/ctinow/200707 2024-03-05 21:26:48+00:00| seen| https://t.me/ctinow/200716 2024-03-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1239 2024-03-06 06:58:06+00:00| exploited|...

CVE-2023-33012

creationtimestamp| type| source ---|---|--- 2024-02-21 19:32:40+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8376 2024-07-03 18:47:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxelparseconfigrce.rb 2025-02-06...

PT-2024-21083 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.184 Description: An issue was discovered where a client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2023-52251

creationtimestamp| type| source ---|---|--- 2024-01-25 22:26:20+00:00| seen| https://t.me/ctinow/173834 2024-01-26 14:49:19+00:00| seen| https://t.me/arpsyndicate/2973 2024-02-01 03:16:26+00:00| seen| https://t.me/ctinow/177279 2024-02-16 20:55:39+00:00| seen|...

CVE-2023-50919

creationtimestamp| type| source ---|---|--- 2024-01-12 09:26:42+00:00| seen| https://t.me/ctinow/167149 2024-01-19 08:17:07+00:00| seen| https://t.me/ctinow/170095 2024-01-23 20:16:11+00:00| seen|...

CVE-2023-47251

creationtimestamp| type| source ---|---|--- 2023-12-31 18:18:48+00:00| seen| MISP/00941aeb-379c-4544-8c08-43e64b6120d7...

CVE-2023-50918

app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...

CVE-2023-46214

creationtimestamp| type| source ---|---|--- 2023-11-19 07:37:50+00:00| published-proof-of-concept| https://t.me/proxybar/1832 2023-11-19 12:58:41+00:00| published-proof-of-concept| https://t.me/RalfHackerChannel/1418 2023-11-19 14:57:34+00:00| published-proof-of-concept| https://t.me/apsecurity/2...

MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.176, which stems from the lack...

PT-2023-30879

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.176 Description An issue was discovered in the app/Model/AppModel.php file, where it lacks a checkParam function for characters such as alphanumerics, underscore, dash, period, and space. Recommendations For versions...

MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.176, which stems from the...

CVE-2023-48657

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

CVE-2023-29360

creationtimestamp| type| source ---|---|--- 2023-08-19 17:11:13+00:00| published-proof-of-concept| https://t.me/CNArsenal/898 2023-09-04 11:20:17+00:00| published-proof-of-concept| https://t.me/cKure/11502 2023-09-16 14:11:35+00:00| published-proof-of-concept| https://t.me/orderofsixangles/1977...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2021-25487

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:47+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971847 2025-02-14 21:08:32+00:00| seen| Telegram/MtdIw5pZ4MJSq9Y1PobwvQlKiBZmrawIx1jJFkL2naTTi3Gl...