5468 matches found
CVE-2023-49897
creationtimestamp| type| source ---|---|--- 2023-12-18 09:41:54+00:00| seen| https://t.me/itsecnews/3861 2023-12-18 10:17:56+00:00| seen| https://t.me/ctinow/155787 2023-12-18 12:17:45+00:00| seen| https://t.me/truesecator/5210 2023-12-21 18:10:03+00:00| seen|...
CVE-2023-47565
creationtimestamp| type| source ---|---|--- 2023-12-18 09:41:54+00:00| seen| https://t.me/itsecnews/3861 2023-12-18 10:17:57+00:00| seen| https://t.me/ctinow/155788 2023-12-18 12:17:45+00:00| seen| https://t.me/truesecator/5210 2023-12-21 18:10:02+00:00| seen|...
CVE-2023-50917
creationtimestamp| type| source ---|---|--- 2023-12-18 01:20:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6219 2023-12-19 23:23:25+00:00| seen| https://t.me/ctinow/156650 2023-12-20 11:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9620...
CVE-2023-48022
creationtimestamp| type| source ---|---|--- 2023-12-17 16:42:32+00:00| seen| https://t.me/ctinow/155636 2024-02-14 12:16:10+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/ai/cve202348022 2024-03-27 10:34:26+00:00| see...
CVE-2023-6329
creationtimestamp| type| source ---|---|--- 2023-12-17 09:37:18+00:00| seen| https://t.me/ctinow/155548 2024-08-26 23:26:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/idsecureauthbypass.rb 2025-02-06 03:13:46+00:00| seen|...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
Code injection
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
CVE-2023-50918
MISP prior to 2.4.182 is affected by a vulnerability in app/Controller/AuditLogsController.php where ACLs for audit logs are mishandled. The root cause is improper access control handling for audit logs, potentially enabling unauthorized access or disclosure of audit data. Remediation is to upgra...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
MISP Security Vulnerabilities
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.182, which stems from...
CVE-2023-6553
creationtimestamp| type| source ---|---|--- 2023-12-12 17:10:05+00:00| seen| https://t.me/truesecator/5192 2023-12-14 07:38:31+00:00| published-proof-of-concept| https://t.me/proxybar/1866 2023-12-15 07:34:50+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/193 2023-12-15...
CVE-2023-6448
creationtimestamp| type| source ---|---|--- 2023-12-11 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-15 08:48:48+00:00| seen| MISP/c578cb44-e440-486d-80a4-8cf6256c1d53 2023-12-24 07:30:47+00:00| seen| https://t.me/arpsyndicate/2159 2024-01-15 09:02:20+00:00| seen|...
CVE-2023-22524
creationtimestamp| type| source ---|---|--- 2023-12-06 16:45:05+00:00| seen| https://t.me/truesecator/5170 2023-12-06 18:10:13+00:00| seen| https://t.me/alexmakus/5195 2023-12-07 11:09:25+00:00| seen| https://t.me/kasperskyb2b/1053 2023-12-14 15:48:07+00:00| published-proof-of-concept|...
MISP cross-site scripting vulnerability (CNVD-2023-9749884)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. Cross-site scripting vulnerability exists in versions prior to MISP 2.4.179. The...
CVE-2023-49926
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
Cross site scripting
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
CVE-2023-49926
Summary : CVE-2023-49926 affects MISP prior to 2.4.179, where the event timeline widget is vulnerable to XSS via the file app/Lib/Tools/EventTimelineTool.php. The root cause is insufficient filtering/escaping of user-supplied data in the event timeline tool. Impact (per sources) : Unauthorized ex...