CVE-2023-0297

creationtimestamp| type| source ---|---|--- 2023-01-17 10:44:03+00:00| published-proof-of-concept| Telegram/n2KULA0ZDBe9JouPZU60255ZIS84-JTUnhcVpFqDs4kxwAQ 2023-01-17 10:49:34+00:00| published-proof-of-concept| https://t.me/proxybar/1299 2023-01-21 12:55:20+00:00| published-proof-of-concept|...

CVE-2023-0315

creationtimestamp| type| source ---|---|--- 2023-01-16 07:23:44+00:00| seen| https://t.me/cibsecurity/56529 2023-02-01 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7663 2023-02-22 18:26:24+00:00| seen|...

CVE-2023-23488

creationtimestamp| type| source ---|---|--- 2023-01-15 09:28:44+00:00| seen| https://t.me/DailyToolz/582 2023-01-16 17:30:07+00:00| seen| https://t.me/truesecator/3945 2023-01-19 15:57:30+00:00| seen|...

CVE-2022-47966

creationtimestamp| type| source ---|---|--- 2023-01-13 19:02:18+00:00| seen| https://t.me/ctinow/86860 2023-01-17 11:48:32+00:00| published-proof-of-concept| https://t.me/thehackernews/2959 2023-01-17 14:32:08+00:00| seen| https://t.me/ctinow/87322 2023-01-17 15:37:02+00:00| seen|...

CVE-2023-21768

creationtimestamp| type| source ---|---|--- 2023-01-11 00:34:47+00:00| seen| https://t.me/cibsecurity/56273 2023-03-08 16:03:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3893 2023-03-08 21:11:41+00:00| published-proof-of-concept|...

CVE-2023-21674

creationtimestamp| type| source ---|---|--- 2023-01-10 21:37:05+00:00| exploited| https://t.me/ctinow/86042 2023-01-11 02:37:31+00:00| exploited| https://t.me/ctinow/86111 2023-01-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=943 2023-01-11 12:38:43+00:00| exploited|...

CVE-2022-44877

creationtimestamp| type| source ---|---|--- 2023-01-05 19:40:32+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6905 2023-01-06 02:19:20+00:00| seen| https://t.me/cibsecurity/56025 2023-01-06 08:11:28+00:00| published-proof-of-concept| https://t.me/proxybar/1261 2023-01-07...

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. The vulnerability allows an authenticated malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application being visited. CIRCL has released an...

CVE-2021-26414

creationtimestamp| type| source ---|---|--- 2022-12-25 23:13:07+00:00| seen| https://t.me/canyoupwnme/6833 2024-11-14 06:09:15+00:00| seen| MISP/b48441df-40dd-486b-b473-e04de6347bff...

CVE-2022-40005

creationtimestamp| type| source ---|---|--- 2022-12-25 22:40:12+00:00| seen| https://t.me/cibsecurity/55310 2023-06-29 12:17:33+00:00| seen| MISP/23306019-6785-40e9-a0d8-c5f4a60998d9 2025-01-23 18:41:16+00:00| exploited| https://t.me/truesecator/6651 2025-04-14 18:54:13+00:00|...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

Design/Logic Flaw

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

PT-2022-28090

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.167 Description The issue is related to Cross-Site Scripting XSS in the template file uploads, specifically in the app/View/Templates/upload file.ctp file. This allows for malicious script execution. Recommendations...

CVE-2022-47928

Summary: CVE-2022-47928 is a cross-site scripting (XSS) vulnerability in MISP prior to 2.4.167, caused by an XSS flaw in the template file uploads feature (app/View/Templates/upload_file.ctp). The issue is documented across multiple sources (NVD, Red Hat, OSV, etc.) and is specifically tied to th...

CVE-2022-47928

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/uploadfile.ctp...

CVE-2018-0125

creationtimestamp| type| source ---|---|--- 2022-12-19 17:20:10+00:00| exploited| https://t.me/truesecator/3847 2022-12-20 16:28:45+00:00| exploited| https://t.me/itsecnews/1954 2022-12-23 11:06:28+00:00| seen| https://t.me/icscert/679 2023-06-14 21:10:03+00:00| seen|...

CVE-2018-0147

creationtimestamp| type| source ---|---|--- 2022-12-19 17:20:10+00:00| exploited| https://t.me/truesecator/3847 2022-12-20 16:28:45+00:00| exploited| https://t.me/itsecnews/1954 2022-12-23 11:06:28+00:00| seen| https://t.me/icscert/679 2023-06-14 21:10:03+00:00| seen|...

CVE-2022-36534

creationtimestamp| type| source ---|---|--- 2022-12-14 13:08:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/syncoverylinuxrce202236534.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:47+00:00|...