CVE-2025-0985

creationtimestamp| type| source ---|---|--- 2025-02-28 16:26:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5911 2025-02-28 19:32:25+00:00| seen| https://t.me/cvedetector/19171 2025-03-02 11:45:38+00:00| seen| Telegram/kaJNenL96DJ7SFLQD0DiLDbgRFvYOOXR70Xq9XyrVqEc4usn 2025-08-22...

CVE-2015-5719: Undefined Security Weakness

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

CVE-2015-5721: Improper Control of Generation of Code

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5720: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...