Jeroen Pinoy

Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb

cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes

cti-transmute Evaluation Report Exports Expose Private Comments and Author Information

cti-transmute Missing Authorization Allows Reactions to Private Comments

cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data

cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata

cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon

cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface

cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses