Recent Items
MISP: Unescaped HTML Injection in PDF Report Element Rendering
Published on 2026-09-10T13:41:51.214000+00:00
Updated on 2026-09-10T13:41:51.214000+00:00
MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization
Published on 2026-09-10T13:04:03.331000+00:00
Updated on 2026-09-10T13:04:03.331000+00:00
Use of Hard-coded Credentials in drEryk Gabinet
Published on 2026-09-10T12:02:12.323000+00:00
Updated on 2026-09-10T12:02:12.323000+00:00
Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
Published on 2026-09-09T21:37:52.063000+00:00
Updated on 2026-09-09T21:37:52.063000+00:00
KGUARD DVR unauthenticated remote command execution vulnerability
Published on 2026-09-09T10:54:15.520000+00:00
Updated on 2026-09-09T10:54:15.520000+00:00
Local privilege escalation vulnerability in ESET AV Remover
Published on 2026-09-09T08:29:18.906000+00:00
Updated on 2026-09-09T08:29:18.906000+00:00
MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
Published on 2026-09-07T13:03:27.052000+00:00
Updated on 2026-09-07T13:03:27.052000+00:00
MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects
Published on 2026-09-07T12:59:43.472000+00:00
Updated on 2026-09-07T12:59:43.472000+00:00
MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data
Published on 2026-09-07T12:39:20.835000+00:00
Updated on 2026-09-07T12:39:20.835000+00:00
MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs
Published on 2026-09-07T12:35:10.174000+00:00
Updated on 2026-09-07T12:35:10.174000+00:00