Jeroen Pinoy

RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook

STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

Cross-Document Parser State Contamination in misp-stix

Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora

Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora

Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora