MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials
CVE-2026-95667
The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_ins
#advisory
共收录 23334 条相关情报。
← 返回所有主题MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON
CVE-2026-95665
MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. Th
MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List
CVE-2026-95661
MISP contains a reflected cross-site scripting (XSS) vulnerability in the attribute histogram view. The $selectedTypes v
MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread
CVE-2026-95659
MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. T
MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules
CVE-2026-95658
MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list.
mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
CVE-2026-87119
Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation cre
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
CVE-2026-89420
Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obt
Tauri framework v2 SSRF Protection Bypass via HTTP Redirects
CVE-2026-95623
The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the in
Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode
CVE-2026-87082
Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in
Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii
CVE-2026-87081
Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label
Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode
CVE-2026-87080
Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never
Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode
CVE-2026-87079
Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long
Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode
CVE-2026-87078
Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_pu
Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode
CVE-2026-74766
Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that r
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode
CVE-2026-74765
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumula
Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler
CVE-2026-93712
Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the
Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array
CVE-2026-93711
Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array. The routi
Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks
CVE-2026-93710
Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler
CVE-2026-93709
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard
CVE-2026-37604
CVE-2026-37604
pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _protected/framework/Ip/