CVE-2020-15711

Affected software: MISP (Malware Information Sharing Platform) prior to version 2.4.129. Vulnerability: Cross‑Site Request Forgery (CSRF) in the web application that fails to verify requests originate from trusted users when setting a favourite homepage. Root cause: Inadequate CSRF protection in ...

CVE-2020-15711

In MISP before 2.4.129, setting a favourite homepage was not CSRF protected...

CVE-2020-6287

creationtimestamp| type| source ---|---|--- 2020-07-14 08:44:29+00:00| seen| https://t.me/cKure/1274 2020-07-14 09:24:21+00:00| seen| https://t.me/thehackernews/759 2020-07-14 14:42:55+00:00| exploited| https://t.me/informationsecuritychannel/39176 2020-07-14 18:09:32+00:00| seen|...

CVE-2020-13851

creationtimestamp| type| source ---|---|--- 2020-07-11 12:19:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandorafmseventsexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:24+00:00| seen|...

CVE-2020-9294

creationtimestamp| type| source ---|---|--- 2020-07-09 14:39:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/fortimailloginbypassdetection.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2020-8558

creationtimestamp| type| source ---|---|--- 2020-07-09 07:19:13+00:00| seen| https://t.me/k8security/84 2020-07-22 07:09:48+00:00| seen| https://t.me/k8security/88 2020-08-01 12:47:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1512 2024-11-14 06:08:53+00:00| seen|...

CVE-2020-1062

creationtimestamp| type| source ---|---|--- 2020-07-08 23:08:27+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6519 2020-07-11 09:29:59+00:00| published-proof-of-concept| https://t.me/orderofsixangles/445 2023-11-22 03:22:47+00:00| seen|...

CVE-2020-5092

creationtimestamp| type| source ---|---|--- 2020-07-04 18:32:07+00:00| seen| https://t.me/CyberGovIL/777 2020-08-10 11:14:38+00:00| seen| https://t.me/cyberbannewsir/1325 2020-10-09 13:35:35+00:00| seen| MISP/9ef4a134-3702-4e7c-b0df-6600d8407b7b...

CVE-2020-13383

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:24+00:00| seen|...

CVE-2020-13381

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen|...

CVE-2020-13382

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen|...

CVE-2020-9497

creationtimestamp| type| source ---|---|--- 2020-07-02 12:02:20+00:00| seen| https://t.me/thehackernews/749 2020-07-05 21:09:55+00:00| seen| https://t.me/YemenShield/16 2020-07-08 03:48:03+00:00| seen| https://t.me/cKure/1146 2024-09-25 20:47:41+00:00| published-proof-of-concept|...

CVE-2020-9498

creationtimestamp| type| source ---|---|--- 2020-07-02 12:02:20+00:00| seen| https://t.me/thehackernews/749 2020-07-05 21:09:55+00:00| seen| https://t.me/YemenShield/16 2020-07-08 03:48:03+00:00| seen| https://t.me/cKure/1146 2024-11-14 06:07:04+00:00| seen| MISP/431469bf-485c-473f-b10a-0f7f9544b...

CVE-2020-10923

creationtimestamp| type| source ---|---|--- 2020-07-01 20:12:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgearr6700passreset.rb 2020-07-28 22:55:23+00:00| seen| https://t.me/cibsecurity/13714 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-10924

creationtimestamp| type| source ---|---|--- 2020-07-01 20:12:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgearr6700passreset.rb 2020-07-28 22:55:22+00:00| seen| https://t.me/cibsecurity/13713 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-2034

creationtimestamp| type| source ---|---|--- 2020-06-30 14:21:48+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittinen-haavoittuvuus-palo-alton-verkkolaitteissa 2020-07-13 17:35:05+00:00| seen| https://t.me/SecLabNews/8054 2020-09-14 11:10:04+00:00| published-proof-of-concept|...

CVE-2020-15411

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-15411

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...