CVE-2021-25325

MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...

CVE-2021-25325

CVE-2021-25325 affects MISP 2.4.136. It enables cross-site scripting via galaxy cluster element values sent to app/View/GalaxyElements/ajax/index.ctp, where reference types may include javascript: URLs. The issue arises from unsanitized input in galaxy elements, enabling an attacker to execute sc...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.136, which originates from...

CVE-2020-6207

creationtimestamp| type| source ---|---|--- 2021-01-15 03:33:25+00:00| published-proof-of-concept| Telegram/mzMPJUtI8bSjYe6VDdVcO-nYDGgxJsJcGR3bIyj6eBfmw 2021-01-16 11:50:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2506 2021-01-23 09:55:55+00:00|...

CVE-2020-6572

creationtimestamp| type| source ---|---|--- 2021-01-15 00:50:38+00:00| seen| https://t.me/cibsecurity/22187 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:25:54+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971208 2025-02-23 02:10:27+00:00|...

CVE-2020-29015

creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:45+00:00| seen| https://t.me/cibsecurity/22163 2021-06-02 06:43:38+00:00| seen| https://t.me/ptswarm/43 2024-11-14 06:09:42+00:00| seen| MISP/4acf1d49-6b23-4d04-9888-244468b25710...

CVE-2021-1648

creationtimestamp| type| source ---|---|--- 2021-01-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=538 2021-01-13 11:29:49+00:00| seen| https://t.me/NeKaspersky/397 2021-03-11 11:01:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2883...

CVE-2021-1647

creationtimestamp| type| source ---|---|--- 2021-01-12 22:58:05+00:00| seen| https://t.me/cibsecurity/22013 2021-01-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=538 2021-01-13 06:13:41+00:00| exploited| https://t.me/thehackernews/979 2021-01-13 10:28:16+00:00|...

CVE-2020-17136

creationtimestamp| type| source ---|---|--- 2021-01-11 22:23:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve202017136.rb 2024-10-09 20:01:43+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2490 2025-02-06...

CVE-2020-15662

creationtimestamp| type| source ---|---|--- 2021-01-09 12:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2462 2024-11-14 06:07:28+00:00| seen| MISP/44fc9a47-93da-48e7-99e3-ad072a353ab9...

CVE-2020-5147

creationtimestamp| type| source ---|---|--- 2021-01-09 07:42:26+00:00| seen| https://t.me/cibsecurity/21880 2024-11-14 06:07:38+00:00| seen| MISP/53d3b2ac-2a55-4e02-9d09-9347da0df79d...

CVE-2021-3111

creationtimestamp| type| source ---|---|--- 2021-01-08 18:41:53+00:00| seen| https://t.me/cibsecurity/21825 2024-11-14 06:08:17+00:00| seen| MISP/6ab56f86-8548-4c67-b921-bc3df14a88c9...

CVE-2020-16040

creationtimestamp| type| source ---|---|--- 2021-01-08 12:07:02+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2450 2021-01-08 22:41:59+00:00| seen| https://t.me/cibsecurity/21851 2021-04-08 21:25:19+00:00| seen|...

CVE-2018-8045

creationtimestamp| type| source ---|---|--- 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2023-10-25 07:54:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/22 2024-11-14 06:07:31+00:00| seen|...

CVE-2019-19846

creationtimestamp| type| source ---|---|--- 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2024-03-12 19:52:20+00:00| seen| https://t.me/ctinow/206059 2024-11-14 06:07:31+00:00| seen| MISP/3e7fe465-b54e-4a7e-b424-ac4b0022fba6...

CVE-2020-10243

creationtimestamp| type| source ---|---|--- 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2024-11-14 06:07:32+00:00| seen| MISP/06ccd168-0690-4c84-a9aa-cddc0b87f7ef...

CVE-2020-35729

creationtimestamp| type| source ---|---|--- 2021-01-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49366 2021-01-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49474 2021-02-12 17:48:56+00:00| seen|...

CVE-2020-11698

creationtimestamp| type| source ---|---|--- 2021-01-04 18:21:41+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/webapp/spamtitanunauthrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:22+00:00| seen|...

CVE-2020-25787

creationtimestamp| type| source ---|---|--- 2020-12-31 19:27:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1810 2021-09-21 06:42:51+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/133 2024-11-14 06:08:16+00:00| seen|...

CVE-2020-35847

creationtimestamp| type| source ---|---|--- 2020-12-30 07:30:07+00:00| seen| https://t.me/cibsecurity/21420 2021-04-21 12:28:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cockpitcmsrce.rb 2024-10-14 21:58:51+00:00| published-proof-of-concep...