Jeroen Pinoy

Stored Cross-Site Scripting via Vue Template Injection in FlowIntel

Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering

Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

Cross-Site Request Forgery in the Administrative User Deletion Endpoint

Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

Stored DOM-Based Cross-Site Scripting in Node Modal Headers

DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons

Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding

DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

Open Redirect in MISP Installer-Generated Apache Configuration