iglocska

MISP Object Sync Drops Objects and Attributes When Description Is Empty

MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes

MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View

MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization

MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging