CVE-2020-13153

app/View/Events/resolvedattributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view...

Design/Logic Flaw

app/View/Events/resolvedattributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view...

CVE-2020-13153

app/View/Events/resolvedattributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view...

CVE-2020-13153

Summary: CVE-2020-13153 affects MISP prior to 2.4.126, with a cross-site scripting (XSS) vulnerability in the file app/View/Events/resolved_attributes.ctp used to render the resolved attributes view. Affected software/component: MISP (the resolved attributes view) before version 2.4.126. Root cau...

CVE-2020-12856

creationtimestamp| type| source ---|---|--- 2020-05-18 08:46:52+00:00| seen| MISP/5ec24b64-3014-4fa2-9b9e-12cf44b7dd05 2020-09-22 21:46:02+00:00| published-proof-of-concept| https://t.me/androidMalware/876 2026-08-02 14:25:40+00:00| published-proof-of-concept| https://t.me/hackersmeet0/1793...

CVE-2020-12889

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

CVE-2020-12889

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

Design/Logic Flaw

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

PYSEC-2020-66

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

CVE-2020-12889

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

CVE-2020-12889

The CVE-2020-12889 entry concerns MISP-maltego 1.4.4, where the MISP connection is incorrectly shared across users during a remote-transform use case. The issue implies a faulty isolation mechanism between user sessions, allowing cross-user access to the MISP connection. Remediation is noted as a...

Open-sourcing new COVID-19 threat intelligence

A global threat requires a global response. While the world faces the common threat of COVID-19, defenders are working overtime to protect users all over the globe from cybercriminals using COVID-19 as a lure to mount attacks. As a security intelligence community, we are stronger when we share...

CVE-2020-1054

creationtimestamp| type| source ---|---|--- 2020-05-14 11:25:09+00:00| published-proof-of-concept| https://t.me/cKure/554 2020-05-17 23:19:57+00:00| published-proof-of-concept| Telegram/S6cKiaRN2UkEobcxhQf6vSUnVPFGFqMX2ieCw0Y3BuGN 2020-05-28 00:37:34+00:00| published-proof-of-concept|...

CVE-2020-1048

creationtimestamp| type| source ---|---|--- 2020-05-13 22:58:05+00:00| published-proof-of-concept| https://t.me/hybgl/209 2020-05-14 10:01:29+00:00| published-proof-of-concept| https://t.me/misteam/160 2020-08-11 20:41:51+00:00| published-proof-of-concept| https://t.me/cKure/1791 2020-08-12...

CVE-2020-11060

creationtimestamp| type| source ---|---|--- 2020-05-12 14:45:16+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6428 2020-05-12 14:52:48+00:00| published-proof-of-concept| https://t.me/techpwnews/635 2021-06-15 01:19:34+00:00| seen| https://t.me/pwnwikizhchannel/649 2024-10-23...

CVE-2020-12720

creationtimestamp| type| source ---|---|--- 2020-05-11 21:20:17+00:00| seen| https://t.me/thehackernews/694 2020-05-12 15:30:02+00:00| seen| https://t.me/SecLabNews/7557 2020-05-13 07:10:59+00:00| seen| https://t.me/informationsecuritychannel/37769 2020-05-15 08:42:43+00:00|...

CVE-2020-11108

creationtimestamp| type| source ---|---|--- 2020-05-11 17:21:08+00:00| published-proof-of-concept| https://t.me/cybershit/749 2020-05-12 10:03:03+00:00| published-proof-of-concept| https://t.me/androidMalware/822 2020-05-12 14:45:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6431...

CVE-2019-10068

creationtimestamp| type| source ---|---|--- 2020-05-06 14:27:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/kenticostagingsyncserver.rb 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:03:59+00:00|...

CVE-2020-4427

creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/ibmdrmdownload.rb 2020-05-05 17:17:40+00:00| seen|...

CVE-2020-4429

creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/ibmdrmdownload.rb 2020-05-05 17:17:40+00:00| seen|...