CVE-2020-9850

creationtimestamp| type| source ---|---|--- 2020-10-01 14:59:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariinoperatorsideeffect.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00|...

CVE-2020-9801

creationtimestamp| type| source ---|---|--- 2020-10-01 14:59:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariinoperatorsideeffect.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00|...

CVE-2020-9856

creationtimestamp| type| source ---|---|--- 2020-10-01 14:59:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariinoperatorsideeffect.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00|...

CVE-2020-3433

creationtimestamp| type| source ---|---|--- 2020-09-29 18:51:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/anyconnectlpe.rb 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 02:22:59+00:00| seen|...

CVE-2020-3569

creationtimestamp| type| source ---|---|--- 2020-09-27 13:56:54+00:00| seen| https://t.me/cKure/2395 2020-09-30 18:57:37+00:00| exploited| https://t.me/thehackernews/861 2020-09-30 19:13:34+00:00| exploited| https://t.me/YemenShield/514 2021-11-08 08:58:17+00:00| seen|...

CVE-2020-25042

creationtimestamp| type| source ---|---|--- 2020-09-25 18:36:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/maracmsuploadexec.rb 2023-12-18 05:34:47+00:00| seen| https://t.me/arpsyndicate/1923 2025-02-06 03:13:44+00:00| seen|...

CVE-2017-1000353

creationtimestamp| type| source ---|---|--- 2020-09-22 10:43:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/jenkinsclideserialization.rb 2020-10-09 16:14:59+00:00| seen| MISP/830935ed-e522-4e00-9ce7-61f03acd871e 2020-10-09 16:23:16+00:00|...

MISP Link Jumping Vulnerability

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.132. The vulnerability stems...

CVE-2020-17506

creationtimestamp| type| source ---|---|--- 2020-09-21 20:38:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/articaproxyauthbypassservicecmdspeformcommandinjection.rb 2024-11-14 06:07:09+00:00| seen| MISP/c5be76fc-667f-4614-a326-c9b2726c0902...

CVE-2020-7460

creationtimestamp| type| source ---|---|--- 2020-09-19 20:38:57+00:00| published-proof-of-concept| https://t.me/HackerOne/2743 2022-07-19 05:12:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1687 2023-11-02 19:17:43+00:00| seen|...

CVE-2018-18556

creationtimestamp| type| source ---|---|--- 2020-09-19 13:26:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vyosrestrictedshellprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00|...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

Code injection

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-25766

CVE-2020-25766 affects MISP prior to 2.4.132. Root cause: a POST operation on a form not linked to the login page can trigger an unwanted action. Affects versions before 2.4.132; documented impact includes possible unauthorized action with low attack complexity (network vector) and no authenticat...

CVE-2020-12109

creationtimestamp| type| source ---|---|--- 2020-09-18 14:58:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tplinkncxxxbonjourcommandinjection.rb 2024-11-14 06:07:14+00:00| seen| MISP/31e52c3d-a86d-4dbc-b75d-9d1508fba5b9 2025-02-06...

CVE-2020-16875

creationtimestamp| type| source ---|---|--- 2020-09-16 20:41:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeecpdlppolicy.rb 2020-12-23 13:09:12+00:00| exploited| https://t.me/CyberGovIL/1021 2020-12-23 14:15:56+00:00| exploited|...

CVE-2020-17132

creationtimestamp| type| source ---|---|--- 2020-09-16 20:41:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeecpdlppolicy.rb 2020-12-23 13:09:12+00:00| exploited| https://t.me/CyberGovIL/1021 2020-12-23 14:15:56+00:00| exploited|...

CVE-2020-15920

creationtimestamp| type| source ---|---|--- 2020-09-16 15:35:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/midasolutionseframeworkajaxreqrce.rb 2025-02-02 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...