Jeroen Pinoy

Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References

Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests

MISP: Improper sharing group authorization check when adding attributes

Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read

MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

Broken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models

MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields

MISP remote code execution via arbitrary rdkafka configuration path

MISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records