Vulnerability Disclosure - MISP 2.5.2
Exploiting PHP filter chains error-based oracle to gain arbitrary file read in MISP 2.5.2.
Acylia's cybersecurity blog
Exploiting PHP filter chains error-based oracle to gain arbitrary file read in MISP 2.5.2.
Exploiting insecure YAML deserialization with JavaScript to gain remote code execution in js-yaml 3.14.0.
Exploiting insecure PHAR deserialization via CakePHP request parameters spoofing to gain remote code execution in MISP 2.4.155.