cyber_rss

cyberrss cert 11 ASD ACSC アラート（オーストラリア） CERT-FR（ANSSI） CISA サイバーセキュリティ勧告 CISA ICS 勧告 CISA ICS 医療機器勧告 JPCERT/CC JPCERT/CC ブログ UK NCSC 全RSSフィード UK NCSC ガイダンス UK NCSC ニュース UK NCSC レポート news 11 Bleeping Computer（フォーラム） BleepingComputer CyberScoop Dark Reading Intelligence Online Krebs on Security Ris...

hackingtool

보안 연구원 및 침투 테스터를 위한 올인원 해킹 도구 v2.0.0의 새로운 기능 | | 기능| 설명 ---|---|-...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse Live CVE PoC Aggregator with Smart Search & Threat Intelligence CVE Pulse automatically discovers, scores, and indexes CVE Proof‑of‑Concepts from GitHub. It enriches them with EPSS scores and CISA KEV data, builds daily snapshots & diffs, and serves a fast, searchable static...

mihari

mihari OSINT 기반 위협 헌팅을 위한 쿼리 집계기입니다. Mihari는 단일 규칙에서 여러 서비스에 걸친 다중 검색을 집계하고, 발견 결과를 데이터베이스에 저장할 수 있습니다. Mihari는 기본적으로 다음 서비스를 지원합니다. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise HunterHow Onyphe OTX PassiveTotal Pulsedive SecurityTrails Shodan urlscan.io Validin...

cve-scores

CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...

PloitKit

PloitKit 해커의 도구 상자 PloitKit는 다른 모든 소프트웨어를 위한 원스톱 솔루션으로 설계된 Python 기반 GUI 도구입니다. 다른 시스템으로 전환하거나 USB를 분실했을 때 이런 문제에 직면했습니다. Google에 가서 모든 도구를 검색하고 다운로드해야 했습니다. 그래서 클릭만 하면 도구가 바로 나오는 도구를 만들기로 결정했습니다. 이 도구에 900개 이상의 도구를 추가했지만, 현재는 400개 이상만 사용할 수 있습니다. 이 도구가 작동하는지 테스트하기 위함이며, 작동하면 모든 사람이 사용할 수 있도록 공개할...

Aggressor-Aggregator

Aggressor Aggregator 説明 Aggressor Script と Beacon Object File BOF のリポジトリを、Cobalt Strike 用の単一の CNA に統合するためのヘルパースクリプトです。オペレータークライアントのセットアップと破棄が頻繁に行われるレッドチーム CTF 環境での自動化を目的としています。このスクリプトは、@am0nsec による Cobalt Strike Aggressor Scripts-Ception ブログ記事のラッパーです。Windows 10、Linux、macOS でテスト済みです。 使い方 1...

ThreatIntel-Aggregator

脅威インテリジェンスアグリゲーター 60以上のセキュリティベンダーからのRSSフィードを集約し、AIトリアージを実行し、検出結果をRunZeroの資産インベントリと照合し、ダークモードのWebダッシュボードを通じて実行可能なアラートを表示する、セルフホスト型の脅威インテリジェンスプラットフォームです。 クラウド依存ゼロでスタンドアロンで動作するように構築されており、Azure/Entra/Sentinel環境に完全統合することもできます — お持ちの環境に合ったティアを選択してください。 デプロイメントティア ティア| スクリプト| AIトリアージ| 認証| ストレージ| 得られるもの...

CVE-2021-27187

CVE-2021-27187 推奨説明 「Sovremennye Delovye Tekhnologii」によるFX Aggregator ターミナルクライアントは、「パスワードを保存」チェックボックスがオンになっている場合、認証情報を平文で login.sav に保存します。 脆弱性タイプその他 CWE-522 不十分に保護された認証情報 製品ベンダー OOO Sovremennye Delovye Tekhnologii 影響を受ける製品コードベース Fx-agreggator terminal client - 1 影響を受けるコンポーネント 影響を受けるファイル「login.sa...

CVE-2021-27188

CVE-2021-27188 제안된 설명 FX Aggregator 터미널 클라이언트 Sovremennye Delovye Tekhnologii 제품는 공격자가 피해자 계정에 대해 5회의 잘못된 로그인 시도를 통해 서비스 거부5시간 동안 접속 중단를 유발할 수 있습니다. 취약점 유형 기타 DoS 제품 공급업체 OOO Sovremennye Delovye Tekhnologii 영향을 받는 제품 코드 베이스 Fx-agreggator terminal client - 1 영향을 받는 구성 요소 영향을 받는 실행 파일 공격 유형 원격 서비스 ...

hosts v3.16.119

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

hosts v3.16.114

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add a missing call to ssamrequestsyncfree Although rare, ssamrequestsyncinit can fail. In that case, the request should be freed using ssamrequestsyncfree. Currently, the request is instead leaked. F...

Malicious code in etoro-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d5f0fb8c06c23afad28686a3d3d689dfc5a3786c73bff2c569fd8b55f2b4ad The package's preinstall.js lifecycle script executes automatically on npm install and performs reconnaissance on the installer host. It collects...

MAL-2026-16111 Malicious code in etoro-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d5f0fb8c06c23afad28686a3d3d689dfc5a3786c73bff2c569fd8b55f2b4ad The package's preinstall.js lifecycle script executes automatically on npm install and performs reconnaissance on the installer host. It collects...

Malicious Package

Overview etoro-aggregator is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the etoro-aggregat...

hosts v3.16.111

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

CVE-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

EUVD-2026-67022

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-81094 mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...