CVE-2017-7215

CVE-2017-7215 affects MISP prior to version 2.4.69. The vulnerability is a cross-site scripting (XSS) flaw in the index filter tool (app/webroot/js/misp2.4.68.js) and the organisation landing page (app/View/Organisations/ajax/landingpage.ctp), allowing remote attackers to inject arbitrary web scr...

CVE-2017-7215

Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4.69 allows remote attackers to inject arbitrary web script or HTML...

CVE-2015-7450

creationtimestamp| type| source ---|---|--- 2017-03-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41613 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ibmwebspherejavadeserialize.rb 2023-06-14...

CVE-2017-5487

creationtimestamp| type| source ---|---|--- 2017-03-03 12:32:58+00:00| exploited| https://t.me/canyoupwnme/875 2022-10-26 15:01:51+00:00| seen| Telegram/cKWDCSIwcxFOknnqsRpkHzc8hBMfo5nCVaTeFVkbll3uQ 2023-06-12 23:21:25+00:00| seen| https://t.me/TYGYE/828 2023-06-30 12:16:59+00:00| seen|...

CVE-2017-6334

creationtimestamp| type| source ---|---|--- 2017-02-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41459 2017-06-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42257 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2018-05-29...

CVE-2017-6074

creationtimestamp| type| source ---|---|--- 2017-02-22 19:12:15+00:00| seen| https://t.me/canyoupwnme/821 2017-02-22 19:13:23+00:00| seen| https://t.me/informationsecuritychannel/3558 2017-02-23 21:20:10+00:00| seen| https://t.me/HackerOne/542 2017-02-23 23:03:22+00:00| seen|...

CVE-2017-5174

creationtimestamp| type| source ---|---|--- 2017-02-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41360 2019-12-17 14:15:18+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-10-09 14:49:39+00:00| seen| MISP/08d290fb-f97b-4471-b4fb-65cd5672f476...

CVE-2017-0358

creationtimestamp| type| source ---|---|--- 2017-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41356 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ntfs3gprivesc.rb 2025-02-06 03:13:43+00:00| seen|...

CVE-2015-0003

creationtimestamp| type| source ---|---|--- 2017-01-07 13:55:47+00:00| seen| MISP/5870f2f5-5744-4ded-a6f5-469c950d210f 2025-08-31 03:01:09+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-07-29 12:01:37+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30...

CVE-2013-6282

creationtimestamp| type| source ---|---|--- 2016-12-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40975 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-10033

creationtimestamp| type| source ---|---|--- 2016-12-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40968 2016-12-26 14:11:15+00:00| published-proof-of-concept| https://t.me/canyoupwnme/489 2016-12-27 12:16:13+00:00| exploited| https://t.me/informationsecuritychannel/3053...

CVE-2016-7255

creationtimestamp| type| source ---|---|--- 2016-12-20 15:35:19+00:00| seen| MISP/58594faf-e98c-4c03-a58c-43cf95ca48b7 2016-12-30 12:25:23+00:00| seen| https://t.me/canyoupwnme/509 2017-01-10 21:57:16+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/3172 2017-01-10...

CVE-2016-582384

creationtimestamp| type| source ---|---|--- 2016-12-12 16:48:01+00:00| seen| https://t.me/alexmakus/861 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgearr7000cgibinexec.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2016-8655

creationtimestamp| type| source ---|---|--- 2016-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40871 2016-12-07 16:53:10+00:00| exploited| https://t.me/canyoupwnme/397 2018-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44696 2018-05-29 15:50:33+00:00|...

CVE-2016-7201

creationtimestamp| type| source ---|---|--- 2016-11-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40784 2017-01-05 06:16:40+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/3119 2017-05-15 06:07:57+00:00| seen| MISP/587e2b9f-db74-4dd6-91d8-7dcb95ca48b...

CVE-2016-6563

creationtimestamp| type| source ---|---|--- 2016-11-08 09:19:21+00:00| published-proof-of-concept| https://t.me/FullDisclosure/257 2016-11-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40805 2018-05-29 15:50:33+00:00| seen|...

Free Open Source Scalable Incident Response Platform: The Hive

Free Open Source Scalable Incident Response Platform TheHive is a scalable 3-in-1 open source and free solution designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly. TheHi...

CVE-2016-8581

creationtimestamp| type| source ---|---|--- 2016-11-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40683 2016-11-02 00:52:33+00:00| published-proof-of-concept| https://t.me/FullDisclosure/225 2018-05-29 15:50:33+00:00| seen|...

CVE-2014-7205

creationtimestamp| type| source ---|---|--- 2016-11-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40689 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/bassmasterjsinjection.rb 2025-02-06 03:13:42+00:00|...

CVE-2016-4669

creationtimestamp| type| source ---|---|--- 2016-10-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40654 2020-08-14 20:12:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/appleios/browser/safarijit.rb 2025-02-06 03:13:42+00:00| seen|...