CVE-2024-29858

CVE-2024-29858 affects MISP prior to 2.4.187. The issue is in the uploadLogo function (app/Controller/OrganisationsController.php) which does not properly validate uploaded logos, i.e., it does not correctly check for a valid logo file. This could lead to unsafe logo uploads. Remediation: upgrade...

CVE-2024-29859

CVE-2024-29859 affects MISP prior to 2.4.187. The issue is in add_misp_export (app/Controller/EventsController.php) where there is an insufficient check for a valid file upload, constituting the root cause. Documented impact indicates potential exposure related to file uploads, with high-severity...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2019-19585

creationtimestamp| type| source ---|---|--- 2024-03-19 17:41:24+00:00| seen| https://t.me/ctinow/211752 2024-11-14 06:10:04+00:00| seen| MISP/960cd098-d4ae-49ca-8c3a-8183adcce170 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:15+00:00| seen|...

CVE-2024-24578

creationtimestamp| type| source ---|---|--- 2024-03-18 23:26:26+00:00| seen| https://t.me/ctinow/211028 2024-03-18 23:26:35+00:00| seen| https://t.me/ctinow/211036 2025-02-21 01:30:23+00:00| seen|...

CVE-2024-20767

creationtimestamp| type| source ---|---|--- 2024-03-18 13:21:35+00:00| seen| https://t.me/ctinow/210495 2024-03-18 13:26:38+00:00| seen| https://t.me/ctinow/210496 2024-03-26 06:53:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6855 2024-03-26 08:54:10+00:00|...

CVE-2023-6019

creationtimestamp| type| source ---|---|--- 2024-03-18 10:01:05+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/ai/cve20236019 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-04-10...

CVE-2024-28254

creationtimestamp| type| source ---|---|--- 2024-03-15 21:22:16+00:00| seen| https://t.me/ctinow/209160 2024-03-15 21:26:26+00:00| seen| https://t.me/ctinow/209173 2024-04-18 12:37:11+00:00| exploited| https://t.me/itsecnews/4333 2024-04-18 15:16:29+00:00| seen| https://t.me/ctinow/215638...

CVE-2024-2044

creationtimestamp| type| source ---|---|--- 2024-03-07 22:27:08+00:00| seen| https://t.me/ctinow/202843 2024-03-14 03:09:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10130 2024-04-16 21:37:56+00:00| seen|...

CVE-2024-23296

creationtimestamp| type| source ---|---|--- 2024-03-05 21:26:36+00:00| seen| https://t.me/ctinow/200707 2024-03-05 21:26:48+00:00| seen| https://t.me/ctinow/200716 2024-03-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1239 2024-03-06 06:58:06+00:00| exploited|...

CVE-2024-23225

creationtimestamp| type| source ---|---|--- 2024-03-05 21:26:33+00:00| seen| https://t.me/ctinow/200704 2024-03-05 21:26:45+00:00| seen| https://t.me/ctinow/200713 2024-03-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1239 2024-03-06 06:58:06+00:00| exploited|...

CVE-2024-1071

creationtimestamp| type| source ---|---|--- 2024-02-27 06:46:34+00:00| seen| https://t.me/thehackernews/4603 2024-02-27 08:12:34+00:00| seen| https://t.me/KomunitiSiber/1550 2024-02-27 09:12:32+00:00| published-proof-of-concept| Telegram/oUVEUqdL5OMBlDBVeR0Zfuwm2SrJKqWCEK-BgHxBeDkUlQ 2024-02-27...

CVE-2023-33012

creationtimestamp| type| source ---|---|--- 2024-02-21 19:32:40+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8376 2024-07-03 18:47:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxelparseconfigrce.rb 2025-02-06...

CVE-2024-1708

creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:10+00:00| seen| https://t.me/ctinow/189797 2024-02-21 17:31:30+00:00| seen| https://t.me/ctinow/189811 2024-02-22 10:40:05+00:00| exploited| https://t.me/truesecator/5446 2024-02-22 10:40:07+00:00| seen|...

CVE-2023-36661

creationtimestamp| type| source ---|---|--- 2024-02-20 23:56:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanticonnectsecurercecve202421893.rb 2024-03-18 16:03:48+00:00| seen| MISP/b832113b-e603-406a-ba62-aae9ba13b1b4 2025-02-06...

CVE-2019-18938

creationtimestamp| type| source ---|---|--- 2024-02-20 14:51:24+00:00| seen| https://t.me/ctinow/188539 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:14+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2024-1512

creationtimestamp| type| source ---|---|--- 2024-02-17 09:21:39+00:00| seen| https://t.me/ctinow/186828 2024-02-17 09:26:22+00:00| seen| https://t.me/ctinow/186839 2024-03-01 11:12:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6700 2024-03-01 15:28:28+00:00|...

CVE-2024-21410

creationtimestamp| type| source ---|---|--- 2024-02-13 20:37:02+00:00| seen| https://t.me/ctinow/184168 2024-02-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1227 2024-02-14 16:13:10+00:00| seen| https://t.me/itsecnews/4112 2024-02-15 06:21:50+00:00| exploited|...

CVE-2024-21338

creationtimestamp| type| source ---|---|--- 2024-02-13 20:06:41+00:00| seen| https://t.me/ctinow/184106 2024-02-28 20:16:57+00:00| seen| https://t.me/ctinow/195824 2024-02-29 09:56:59+00:00| seen| https://t.me/ctinow/196429 2024-02-29 12:24:27+00:00| exploited| https://t.me/thehackernews/4619...