5468 matches found
CVE-2024-54674
app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...
CVE-2024-54675
app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...
CVE-2024-54675
CVE-2024-54675 affects MISP up to version 2.5.2, with a stored cross-site scripting (XSS) flaw in the editor interface (app/webroot/js/workflows-editor/workflows-editor.js) used for ad-hoc workflows. The root cause is a stored XSS vulnerability in the editor that can impact users who load the aff...
CVE-2024-54674
app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...
CVE-2024-54675
app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...
MISP 安全漏洞
MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP 2.5.2 and earlier versions,...
CVE-2024-54675
app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...
CVE-2024-42449
creationtimestamp| type| source ---|---|--- 2024-12-03 21:45:08+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113591078514826699 2024-12-04 01:42:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113592013388424843 2024-12-04 04:12:24+00:00| seen|...
CVE-2024-11680
creationtimestamp| type| source ---|---|--- 2024-11-21 17:59:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsendunauthrce.rb 2024-11-26 09:58:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113548665618022004 2024-11-27...
CVE-2024-47407
creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07 2025-02-11 08:32:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/mypromgrcmd.rb 2025-02-11...
CVE-2024-11320
creationtimestamp| type| source ---|---|--- 2024-11-21 10:11:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113520403781165691 2024-12-01 12:59:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9279 2024-12-02 03:04:28+00:00| published-proof-of-concept|...
CVE-2024-28185
creationtimestamp| type| source ---|---|--- 2024-11-20 22:41:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/judge0sandboxescapecve202428189.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...
CVE-2024-28189
creationtimestamp| type| source ---|---|--- 2024-11-20 22:41:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/judge0sandboxescapecve202428189.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...
CVE-2024-48990
creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...
CVE-2024-11477
creationtimestamp| type| source ---|---|--- 2024-11-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1532/ 2024-11-22 16:40:16+00:00| seen| https://t.me/truesecator/6464 2024-11-23 09:01:40+00:00| exploited| https://t.me/kasperskyb2b/1513 2024-11-23 12:18:03+00:00| seen...
CVE-2023-28461
creationtimestamp| type| source ---|---|--- 2024-11-20 04:47:00+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113513465135891182 2024-11-25 15:59:35+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113544421331313601 2024-11-25 16:25:12+00:00| seen|...
CVE-2024-44309
creationtimestamp| type| source ---|---|--- 2024-11-19 18:58:42+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113511151778117019 2024-11-20 02:02:32+00:00| exploited| https://t.me/cvedetector/11554 2024-11-20 04:00:00+00:00| seen|...
CVE-2024-44757
creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:48+00:00| seen| https://t.me/cvedetector/11366 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...
CVE-2024-52436
creationtimestamp| type| source ---|---|--- 2024-11-18 17:23:09+00:00| seen| https://t.me/cvedetector/11342 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51 2026-04-04 17:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miopj2vlau2f...