5468 matches found
CVE-2020-11458
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...
CVE-2020-11458
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...
Code injection
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...
CVE-2020-11458
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...
CVE-2020-11458
CVE-2020-11458 affects MISP versions prior to 2.4.124, where app/Model/feed.php allows administrators to select arbitrary files to ingest. This does not expose full file contents but can leak strings matching patterns, including passwords from database.php or GPG passphrases from config.php. Rele...
CVE-2020-8816
creationtimestamp| type| source ---|---|--- 2020-03-30 20:32:29+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6348 2020-04-02 20:06:09+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/1549 2020-05-28 18:50:18+00:00| seen|...
CVE-2019-4716
creationtimestamp| type| source ---|---|--- 2020-03-30 15:59:19+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/ibmtm1unauthrce.rb 2020-03-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48273 2021-11-08 08:58:18+00:00| seen|...
CVE-2020-7961
creationtimestamp| type| source ---|---|--- 2020-03-30 13:40:04+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/4056 2020-04-15 04:46:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/liferayjavaunmarshalling.rb 2020-04-16...
CVE-2019-20499
creationtimestamp| type| source ---|---|--- 2020-03-27 17:47:41+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdwl2600commandinjection.rb 2020-03-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48274 2025-02-06...
CVE-2020-0646
creationtimestamp| type| source ---|---|--- 2020-03-25 16:34:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepointworkflowsxoml.rb 2020-03-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48275 2021-09-21 06:42:55+00:0...
CVE-2020-1020
creationtimestamp| type| source ---|---|--- 2020-03-24 08:41:09+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/korjaamaton-haavoittuvuus-ms-windows-adobe-type-manager-fonttikirjastossa 2020-04-14 20:39:14+00:00| seen| https://t.me/thehackernews/668 2020-04-15 04:00:00+00:00| seen|...
CVE-2020-8518
creationtimestamp| type| source ---|---|--- 2020-03-23 12:42:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/hordecsvrce.rb 2024-02-06 15:08:35+00:00| exploited| https://t.me/CyberSecurityTechnologies/795 2025-02-06 03:13:44+00:00| seen|...
CVE-2019-19833
creationtimestamp| type| source ---|---|--- 2020-03-19 16:50:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/tautullishutdownexec.rb 2024-03-15 08:12:01+00:00| seen| https://t.me/ctinow/208481 2025-02-06 03:13:44+00:00| seen|...
CVE-2020-8467
creationtimestamp| type| source ---|---|--- 2020-03-18 10:15:02+00:00| exploited| https://t.me/SecLabNews/7124 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 03:17:32+00:00| seen|...
CVE-2020-8468
creationtimestamp| type| source ---|---|--- 2020-03-18 10:15:02+00:00| exploited| https://t.me/SecLabNews/7124 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 19:00:03+00:00| seen|...
CVE-2020-10220
creationtimestamp| type| source ---|---|--- 2020-03-16 11:28:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/rconfigajaxarchivefilesrce.rb 2020-03-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48223 2024-10-10...
CVE-2020-0041
creationtimestamp| type| source ---|---|--- 2020-03-10 21:31:51+00:00| published-proof-of-concept| https://t.me/androidMalware/720 2020-03-12 04:37:48+00:00| published-proof-of-concept| https://t.me/antichat/8056 2020-03-31 00:02:42+00:00| published-proof-of-concept| https://t.me/R0Crew/1471...
MISP Cross-Site Scripting Vulnerability (CNVD-2020-16634)
MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. MISP 2.4.122 A reflected cross-site scripting vulnerability exists related to app/View/Users/statisticsorgs.ct...