Jeroen Pinoy

Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data

Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook

RansomLook Arbitrary File Read via Path Traversal in Post screen Field

RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook

STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

Cross-Document Parser State Contamination in misp-stix