CVE-2016-8870

creationtimestamp| type| source ---|---|--- 2016-10-27 22:27:13+00:00| exploited| https://t.me/webpwn/93 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-8869

creationtimestamp| type| source ---|---|--- 2016-10-27 22:27:13+00:00| exploited| https://t.me/webpwn/93 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-7855

creationtimestamp| type| source ---|---|--- 2016-10-26 22:19:48+00:00| exploited| https://t.me/BleepingComputer/165 2016-10-28 12:53:40+00:00| exploited| https://t.me/itsecalert/48 2016-12-20 15:35:19+00:00| seen| MISP/58594faf-e98c-4c03-a58c-43cf95ca48b7 2017-04-26 06:42:46+00:00| seen|...

CVE-2015-2424

creationtimestamp| type| source ---|---|--- 2016-10-26 14:25:11+00:00| seen| MISP/5810bcc6-5750-4c4b-97fb-339b95ca48b7 2020-10-09 14:23:51+00:00| seen| MISP/ac986ebb-348a-4ad8-a64f-0afcac8f9b9b 2020-10-09 14:23:59+00:00| seen| MISP/b8353a20-84f7-4024-b4f3-62d47e2236d9 2020-10-09 17:20:21+00:00|...

CVE-2015-4624

creationtimestamp| type| source ---|---|--- 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40609 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pineapplepreconfigcmdinject.rb 2018-05-29...

CVE-2016-5195

creationtimestamp| type| source ---|---|--- 2016-10-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40611 2016-10-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40616 2016-10-21 12:03:18+00:00| seen| https://t.me/itsecalert/46 2016-10-21 15:37:57+00:00|...

CVE-2016-0752

creationtimestamp| type| source ---|---|--- 2016-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40561 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/railsdynamicrendercodeexec.rb 2023-06-14...

CVE-2016-5425

creationtimestamp| type| source ---|---|--- 2016-10-10 10:52:23+00:00| published-proof-of-concept| https://t.me/canyoupwnme/160 2016-10-11 16:36:42+00:00| published-proof-of-concept| https://t.me/FullDisclosure/149 2023-03-14 10:44:22+00:00| seen|...

CVE-2016-6433

creationtimestamp| type| source ---|---|--- 2016-10-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40463 2017-01-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41041 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-1240

creationtimestamp| type| source ---|---|--- 2016-10-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40450 2016-10-03 23:59:19+00:00| seen| https://t.me/FullDisclosure/121 2016-10-26 23:42:50+00:00| seen| https://t.me/FullDisclosure/210 2023-02-06 14:21:33+00:00| seen|...

CVE-2016-0189

creationtimestamp| type| source ---|---|--- 2016-10-02 16:51:25+00:00| seen| MISP/57f12c6a-5864-4abb-8207-5a60646d1a36 2017-08-23 20:52:05+00:00| published-proof-of-concept| https://t.me/SHATOOB/1973 2017-08-30 07:57:15+00:00| seen| MISP/59a66b5f-28b0-45c2-8bf6-06bcbce2ab96 2018-03-27...

CVE-2016-4997

creationtimestamp| type| source ---|---|--- 2016-09-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40435 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilterprivescipv4.rb 2025-02-06 03:13:42+00:00|...

CVE-2016-0800

creationtimestamp| type| source ---|---|--- 2016-09-21 19:52:02+00:00| published-proof-of-concept| https://t.me/bugbountychannel/185 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-11-07 22:22:31+00:00| seen|...

CVE-2016-3351

creationtimestamp| type| source ---|---|--- 2016-09-14 16:34:32+00:00| exploited| https://t.me/itsecalert/38 2016-09-15 14:32:32+00:00| exploited| https://t.me/xakepru/913 2016-09-16 11:59:44+00:00| seen| MISP/57dbde53-bfe8-4aaa-99b9-03ffbce2ab96 2023-03-09 09:29:35+00:00| seen|...

CVE-2015-5721

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Directory traversal

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

CVE-2015-5719

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

Design/Logic Flaw

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...