elhoim

SQL Injection in Database Migration via Stored Connector Identifiers in flowintel

MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment

MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()

MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances

MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control

MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View

MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values

Reflected Cross-Site Scripting in MISP Event Filtering via taggedAttributes and galaxyAttachedAttributes Parameters