Jeroen Pinoy

MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging

MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server

MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter

MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows

MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection

MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field

MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph