iglocska

MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph

MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image

MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths

MISP: Disabled-user check ineffective in pre-authentication TOTP login branch

MISP Unauthenticated Blind SSRF via XML Body Processing

MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON