CVE-2020-6418

creationtimestamp| type| source ---|---|--- 2020-02-25 13:08:04+00:00| exploited| https://t.me/ctinow/20700 2020-02-25 18:03:55+00:00| exploited| https://t.me/truesecator/214 2020-02-26 02:58:18+00:00| exploited| https://t.me/secinfosex/33 2020-02-27 04:00:00+00:00| seen|...

CVE-2020-8794

creationtimestamp| type| source ---|---|--- 2020-02-25 11:11:12+00:00| seen| https://t.me/antichat/7965 2020-02-25 12:01:48+00:00| exploited| https://t.me/thehackernews/611 2020-03-04 19:41:51+00:00| seen|...

CVE-2020-0668

creationtimestamp| type| source ---|---|--- 2020-02-23 00:04:08+00:00| published-proof-of-concept| https://t.me/hybgl/25 2020-05-07 13:57:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20200668servicetracing.rb 2021-09-21 04:41:55+00:0...

CVE-2015-7611

creationtimestamp| type| source ---|---|--- 2020-02-20 09:52:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/apachejamesexec.rb 2020-02-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48130 2025-02-06 03:13:42+00:00| seen|...

CVE-2020-0618

creationtimestamp| type| source ---|---|--- 2020-02-19 09:52:19+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3859 2020-03-12 17:37:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ssrsnavcorrectorviewstate.rb 2020-09-18...

CVE-2019-12518

creationtimestamp| type| source ---|---|--- 2020-02-13 15:58:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/crosschexdevicebof.rb 2020-02-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48092 2024-03-05 09:42:25+00:00|...

CVE-2020-8894

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php...

CVE-2020-8890

An issue was discovered in MISP before 2.4.121. It mishandled time skew between the machine hosting the web server and the machine hosting the database when trying to block a brute-force series of invalid requests...

CVE-2020-8894

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php...

CVE-2020-8890

An issue was discovered in MISP before 2.4.121. It mishandled time skew between the machine hosting the web server and the machine hosting the database when trying to block a brute-force series of invalid requests...

CVE-2020-8893

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

CVE-2020-8892

An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests...

CVE-2020-8892

An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests...

CVE-2020-8893

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

CVE-2020-8891

An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests...

CVE-2020-8891

An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests...

Design/Logic Flaw

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php...

Code injection

An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests...

Code injection

An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests...

Design/Logic Flaw

An issue was discovered in MISP before 2.4.121. It mishandled time skew between the machine hosting the web server and the machine hosting the database when trying to block a brute-force series of invalid requests...