5480 matches found
CVE-2022-48329
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...
CVE-2022-48328
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
CVE-2022-48328
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
CVE-2022-48329
CVE-2022-48329 affects MISP before 2.4.166, where the order parameter can be used insecurely. The vulnerability relates to specific PHP components: app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php. It has a CV...
CVE-2022-48329
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...
CVE-2020-15415
creationtimestamp| type| source ---|---|--- 2023-02-19 12:43:33+00:00| published-proof-of-concept| https://t.me/JerusalemElectronicArmy/179 2024-09-30 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-02-23 02:10:59+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123...
CVE-2022-39952
creationtimestamp| type| source ---|---|--- 2023-02-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=974 2023-02-19 08:36:16+00:00| seen| Telegram/xsTtApY3O8LYaQlwSLnV7xep0iYsFMDc8zjy5nUPKpyG 2023-02-20 07:21:35+00:00| published-proof-of-concept| https://t.me/ctinow/9442...
CVE-2023-21715
creationtimestamp| type| source ---|---|--- 2023-02-14 20:51:29+00:00| seen| https://t.me/ctinow/93388 2023-02-14 21:31:23+00:00| exploited| https://t.me/ctinow/93396 2023-02-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=970 2023-02-15 18:04:11+00:00| exploited|...
CVE-2023-25194
creationtimestamp| type| source ---|---|--- 2023-02-14 06:59:01+00:00| published-proof-of-concept| Telegram/UgjyfN33Nakq6MmMsTBw0rSSkp77M7XZKGq62f2fQ8miTg 2023-02-14 19:43:14+00:00| published-proof-of-concept| https://t.me/malwar3s/32 2023-02-20 06:51:35+00:00| seen| https://t.me/cKure/10688...
CVE-2023-23529
creationtimestamp| type| source ---|---|--- 2023-02-14 03:50:00+00:00| exploited| https://t.me/alexmakus/4907 2023-02-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=968 2023-02-14 07:00:07+00:00| exploited| https://t.me/truesecator/4061 2023-02-14 07:35:46+00:00| seen|...
CVE-2022-20705
creationtimestamp| type| source ---|---|--- 2023-02-14 00:13:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ciscorv340lan.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:42+00:00| seen|...
CVE-2023-25717
creationtimestamp| type| source ---|---|--- 2023-02-13 22:29:59+00:00| seen| https://t.me/cibsecurity/58024 2023-05-09 12:59:31+00:00| exploited| https://t.me/informationsecuritychannel/49885 2023-05-10 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8269...
CVE-2022-45699
creationtimestamp| type| source ---|---|--- 2023-02-10 16:57:38+00:00| seen| https://t.me/cibsecurity/57896 2023-06-29 12:17:34+00:00| seen| MISP/e53ff6a5-95b3-4dca-a137-07f44618abb7 2025-03-24 18:22:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8488 2025-06-16...
CVE-2023-0698
creationtimestamp| type| source ---|---|--- 2023-02-09 13:14:55+00:00| seen| https://t.me/truesecator/4045 2023-03-16 11:14:58+00:00| seen| MISP/e4499c38-2f8f-4791-b28a-ded42b936bc0 2023-05-05 19:09:53+00:00| published-proof-of-concept| https://t.me/crackcodes/3402 2023-05-05 20:50:03+00:00|...
CVE-2021-25298
creationtimestamp| type| source ---|---|--- 2023-02-07 21:54:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagiosxiconfigwizardsauthenticatedrce.rb 2023-04-27 09:58:59+00:00| confirmed|...
CVE-2023-23333
creationtimestamp| type| source ---|---|--- 2023-02-07 00:23:30+00:00| seen| https://t.me/cibsecurity/57622 2023-02-07 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7706 2023-02-09 14:48:00+00:00| published-proof-of-concept| https://t.me/malwar3s/28 2023-02-19...
CVE-2022-47986
creationtimestamp| type| source ---|---|--- 2023-02-03 13:00:09+00:00| published-proof-of-concept| https://t.me/truesecator/4022 2023-02-15 19:15:55+00:00| exploited| https://t.me/informationsecuritychannel/49577 2023-02-16 14:35:07+00:00| exploited| https://t.me/truesecator/4076 2023-02-17...
CVE-2022-42867
creationtimestamp| type| source ---|---|--- 2023-02-02 13:13:50+00:00| seen| MISP/b32e9d12-dffb-4230-b045-3d6bf52a6311 2025-04-21 15:02:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12672...
CVE-2023-21608
creationtimestamp| type| source ---|---|--- 2023-02-02 12:59:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3747 2023-02-02 17:31:22+00:00| published-proof-of-concept| https://t.me/proxybar/1354 2023-02-02 18:05:26+00:00| published-proof-of-concept|...
CVE-2022-22942
creationtimestamp| type| source ---|---|--- 2023-01-31 19:59:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfxfdprivesc.rb 2023-12-18 07:13:48+00:00| seen| https://t.me/arpsyndicate/1936 2024-01-10 08:06:54+00:00| seen|...