Jeroen Pinoy

Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Flowintel Stored XSS in Calendar via Malicious Case Title

Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library

RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

RansomLook API Key Disclosure Through /admin/apikeys HTML Source

Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook

RansomLook Unauthenticated Database Export Exposes Private Data

RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data