Recent Items
MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data
Published on 2026-09-06T14:15:06.533000+00:00
Updated on 2026-09-06T14:15:06.533000+00:00
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
Published on 2026-09-05T20:00:59.107000+00:00
Updated on 2026-09-05T20:00:59.107000+00:00
Unauthenticated file read in Mikrotik RouterOS
Published on 2026-09-05T20:00:58.457000+00:00
Updated on 2026-09-05T20:00:58.457000+00:00
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
Published on 2026-09-05T20:00:57.894000+00:00
Updated on 2026-09-05T20:00:57.894000+00:00
TLS server impersonation possible in Mikrotik RouterOS
Published on 2026-09-05T20:00:57.258000+00:00
Updated on 2026-09-05T20:00:57.258000+00:00
Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
Published on 2026-09-05T20:00:56.614000+00:00
Updated on 2026-09-05T20:00:56.614000+00:00
SSH user impersonation possible in Mikrotik RouterOS
Published on 2026-09-05T20:00:55.811000+00:00
Updated on 2026-09-05T20:00:55.811000+00:00
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's return value and unconditionally accepts the result. If mkpasswd fails to generate a yescrypt hash, for example because an incompatible mkpasswd implementation or an environment without yescrypt support i…
Published on 2026-09-04T12:59:59.743000+00:00
Updated on 2026-09-04T12:59:59.743000+00:00
Cross-Site Request Forgery via Attacker-Controlled REST Detection in MISP
Published on 2026-09-04T09:40:54.018000+00:00
Updated on 2026-09-04T09:40:54.018000+00:00
MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests
Published on 2026-09-04T09:27:36.525000+00:00
Updated on 2026-09-04T09:27:36.525000+00:00