iglocska

MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View

MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

MISP Missing Authorization on replaceSuggestionInReport Event Report Action

MISP Information Disclosure via Forged Upload Path

MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

MISP Path Traversal via Organization Name in Org-Statistics Logo Check

MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution

MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legends