iglocska

MISP Path Traversal via Organization Name in Org-Statistics Logo Check

MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution

MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legends

Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu

MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports

MISP: HTTP Method Bypass of Login Security Controls (Bruteforce Protection and Email OTP)

MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport

MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime

MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension