iglocska

MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period

MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

MISP Reflected XSS in Taxonomy Tag Confirmation Forms

MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter

MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions

MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows

MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection

MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field