CVE-2015-5721

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5721

The vulnerability CVE-2015-5721 affects Malware Information Sharing Platform (MISP) before 2.3.90. A PHP object injection flaw exists via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp. Remote attackers could exploit this to execute cod...

CVE-2015-5720

Malware Information Sharing Platform (MISP) versions prior to 2.3.90 expose multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature. Attack vectors involve add.ctp, edit.ctp, and ajaxification.js, enabling remote attackers to inject arbitrary web script or HTML. The p...

CVE-2015-5719

CVE-2015-5719 affects Malware Information Sharing Platform (MISP) before 2.3.92. The issue is in app/Controller/TemplatesController.php where filenames under tmp/files/ are not properly restricted. CNVD-2016-07269 notes this allows a local attacker to perform a symbolic link attack to overwrite a...

CVE-2015-5719

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

CVE-2016-4655

creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:54+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:27+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2018-06-04 23:30:25+00:00| seen|...

CVE-2016-4657

creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:53+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:54+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2017-03-12 17:11:06+00:00| published-proof-of-concept| https://t.me/alexlitreevchannel/62 2017-03-13...

CVE-2015-8351

creationtimestamp| type| source ---|---|--- 2016-08-23 13:24:04+00:00| seen| MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f 2025-08-22 03:00:05+00:00| published-proof-of-concept| Telegram/yRRSYPm0RgGpdp4nWmrwBynYjznhWXtD04IFm92Z71qvTGs 2026-07-29 12:00:33+00:00| seen| https://t.me/CVEhub/12425...

CVE-2015-1397

creationtimestamp| type| source ---|---|--- 2016-08-23 13:20:51+00:00| seen| MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f 2025-08-30 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhua7kpl2g...

CVE-2016-6897

creationtimestamp| type| source ---|---|--- 2016-08-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40288 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/wordpressdirectorytraversaldos.rb 2025-02-06...

CVE-2016-5330

creationtimestamp| type| source ---|---|--- 2016-08-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41711 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/vmhgfswebdavdllsideload.rb 2025-02-06 03:13:42+00:0...

CVE-2016-6253

creationtimestamp| type| source ---|---|--- 2016-07-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40141 2016-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40385 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-2098

creationtimestamp| type| source ---|---|--- 2016-07-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40086 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/railsactionpackinlineexec.rb 2025-02-06 03:13:42+00:0...

CVE-2016-0147

creationtimestamp| type| source ---|---|--- 2016-06-14 21:17:05+00:00| seen| MISP/57606c78-187c-491e-9486-2dc85b86d7e5 2025-08-31 03:01:08+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-07-29 12:01:11+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30...

CVE-2016-4171

creationtimestamp| type| source ---|---|--- 2016-06-14 20:49:46+00:00| seen| MISP/57606c78-187c-491e-9486-2dc85b86d7e5 2016-06-14 23:09:57+00:00| exploited| https://t.me/itsecalert/31 2016-06-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=81 2019-10-11 07:41:10+00:00|...

CVE-2016-3087

creationtimestamp| type| source ---|---|--- 2016-06-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39919 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/strutsdmirestexec.rb 2023-12-06 12:02:24+00:00| seen|...

CVE-2016-2004

creationtimestamp| type| source ---|---|--- 2016-05-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39858 2016-05-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39874 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-4010

creationtimestamp| type| source ---|---|--- 2016-05-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39838 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/magentounserialize.rb 2025-02-06 03:13:42+00:00| seen...

CVE-2014-4977

creationtimestamp| type| source ---|---|--- 2016-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39836 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwallscrutinizermethoddetailsqli.rb 2025-02-06...