iglocska

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

MISP Missing Authorization on replaceSuggestionInReport Event Report Action

MISP Information Disclosure via Forged Upload Path

MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name