5451 matches found
CVE-2015-5996
creationtimestamp| type| source ---|---|--- 2018-12-11 16:08:58+00:00| seen| MISP/5c0fdf07-0608-4e51-9884-1f070a021402 2018-12-13 08:43:56+00:00| seen| https://t.me/securixykz/328...
CVE-2018-1002105
creationtimestamp| type| source ---|---|--- 2018-12-07 12:04:22+00:00| published-proof-of-concept| https://t.me/antichat/2932 2018-12-07 13:01:03+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4848 2018-12-07 15:46:04+00:00| seen| MISP/5c0a9495-4b38-4815-a223-767d0a021402 2018-12-09...
CVE-2018-4021
creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402...
CVE-2018-4020
creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...
CVE-2018-4019
creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...
CVE-2018-19908
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...
Command injection
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...
CVE-2018-19908
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...
CVE-2018-19908
Affected software: MISP 2.4.9x (pre-2.4.99). In the STIX 1 import path, the code in app/Model/Event.php uses an unescaped filename string to build a shell command. This enables an authenticated attacker to modify the STIX import filename to inject and execute arbitrary commands. Exploitation deta...
CVE-2018-19908
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...
CVE-2018-15982
creationtimestamp| type| source ---|---|--- 2018-12-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=345 2018-12-06 09:05:42+00:00| exploited| https://t.me/SecLabNews/3784 2018-12-06 11:35:13+00:00| exploited| https://t.me/xakepru/5343 2018-12-06 12:30:32+00:00| exploite...
CVE-2017-12557
creationtimestamp| type| source ---|---|--- 2018-12-03 23:17:23+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpimcjavadeserialize.rb 2018-12-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45952 2024-01-07 02:31:02+00:00|...
CVE-2018-11770
creationtimestamp| type| source ---|---|--- 2018-11-29 20:08:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sparkunauthrce.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:03+00:00| seen|...
CVE-2018-19207
creationtimestamp| type| source ---|---|--- 2018-11-29 19:43:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wpgdprcomplianceprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00| see...
CVE-2018-19518
creationtimestamp| type| source ---|---|--- 2018-11-27 22:53:35+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/phpimapopenrce.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45914 2021-03-01 11:00:27+00:00| seen|...
CVE-2018-4237
creationtimestamp| type| source ---|---|--- 2018-11-27 20:11:08+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/libxpcmitmssudo.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45916 2025-02-06 03:13:43+00:00| seen|...
CVE-2018-19407
creationtimestamp| type| source ---|---|--- 2018-11-27 15:35:57+00:00| seen| MISP/5bfd6369-a0bc-4606-bf75-32dc0a021402...
CVE-2018-19406
creationtimestamp| type| source ---|---|--- 2018-11-27 15:35:57+00:00| seen| MISP/5bfd6369-a0bc-4606-bf75-32dc0a021402...
CVE-2016-7256
creationtimestamp| type| source ---|---|--- 2018-11-23 14:09:10+00:00| seen| MISP/5bf7fa3d-4308-4042-b09d-2176ac12042b 2020-10-09 15:57:20+00:00| seen| MISP/3662e234-ff72-4608-be6d-59e5352154c4 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:56+00:00|...