Jeroen Pinoy

MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field

MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph

MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page

Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes

Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names

Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip

Ail Framework Crawler: Missing Cookiejar Authorization Check Allows Cross-Organization Cookiejar Attachment

AIL Framework Onion Module: Non-Onion URL Accepted as Crawler Task Due to Bypassed Domain Validation

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread