Sami Mokaddem

DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests

Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References

Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

Stored DOM-Based Cross-Site Scripting in Node Modal Headers

DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons

Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links

importModule function in MISP ignores per-organisation import module restrictions

MISP importModule missing authorization allows read-only users to modify events via misp_standard imports