iglocska

MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances

MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings

MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels

MISP CSS Injection via Remote Tag Colour in Event Preview

MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records

MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control

MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution

MISP Object Sync Drops Objects and Attributes When Description Is Empty

MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change