← All credits

Alexandre Dulaunoy

15 vulnerability records and advisories credit this contributor.

CVE-2026-127046

MISP Modules Website Exposes External Tool API Keys in /external_tools/list Response

CVE-2026-127016

MISP Modules Website: Missing Authorization on External Tool Management Endpoints

CVE-2026-126991

SPARQL Injection in MISP Wikidata Lookup Module via Unescaped User Input

CVE-2026-111458

ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting

CVE-2026-106512

MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS

CVE-2026-106513

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

CVE-2026-101041

Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup

Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup

Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup