Niels Teusink of Eye Security

MISP Unauthenticated Blind SSRF via XML Body Processing

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON

MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution