franckferman

2 exploits Active since Dec 2025

CVE-2025-67906 NOMISEC MEDIUM WORKING POC

MISP < 2.5.28 - Cross-Site Scripting in Workflow Execution Path

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

2 stars

CVSS 5.4

View Code

CVE-2026-24061 NOMISEC CRITICAL WORKING POC

GNU Inetutils Telnet Authentication Bypass Exploit CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

1 stars

CVSS 9.8

View Code