1636 matches found
investigations
Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...
cc-ddos
Please Star this repo if you find it useful, because it's free : Donation information in the release The script still works normally, tested in 2025. cc-ddos A Python script to DDOS a website using multiple HTTP Flood methods, a normal website only needs 5 seconds to completely crash! How to Use:...
threat-hunting-guide
Corelight Threat Hunting Guide working copy This repository serves as the working data for the Corelight Threat Hunting Guide. The source prose which is maintained here is periodically put through editing, layout, and graphic design, and then published as a PDF file and distributed by Corelight,...
CVE-2015-6420
CVE-2015-6420 Deserialization vulnerability References Java Deserialization Vulnerability - CC Exploit Chain Analysis...
burp-cc-bridge
CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...
phishurl-list
Phishing URL dataset from JPCERT/CC Column details date: Date confirmed by JPCERT/CC URL: Entire URL of a phishing site description: Information on a spoofed brand Statistics page https://jpcertcc.github.io/phishurl-list/...
AZL-108008 CVE-2026-95838 affecting package moby-containerd-cc 1.7.7-17
containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque whiteouts are...
AZL-108075 CVE-2026-95838 affecting package kata-containers-cc 3.15.0.aks0-21
containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque whiteouts are...
CVE-2026-108549
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an...
CVE-2026-108549 cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an...
EUVD-2026-96344
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an...
CVE-2026-108549 cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an...
CVE-2026-108549
The software cc-connect through version 1.5.0 is vulnerable to a missing authentication flaw in the MAX platform adapter webhook mode (specifically in platform/max/max.go). If no webhook_secret is configured, the application accepts unauthenticated updates. A remote attacker capable of reaching t...
PT-2026-109664
Name of the Vulnerable Software and Affected Versions cc-connect versions prior to 1.5.1 Description The MAX platform adapter webhook mode in platform/max/max.go fails to require authentication when no webhook secret is configured. Remote attackers can access the webhook listener on port 8080 and...
CVE-2026-108549: Missing Authentication for Critical Function
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an...
CVE-2026-84304 affecting package moby-containerd-cc for versions less than 1.7.7-18
CVE-2026-84304 affecting package moby-containerd-cc for versions less than 1.7.7-18. A patched version of the package is available...
CVE-2026-81869 affecting package moby-containerd-cc for versions less than 1.7.7-18
CVE-2026-81869 affecting package moby-containerd-cc for versions less than 1.7.7-18. A patched version of the package is available...
CVE-2026-53493 affecting package moby-containerd-cc for versions less than 1.7.7-18
CVE-2026-53493 affecting package moby-containerd-cc for versions less than 1.7.7-18. A patched version of the package is available...
AZL-107715 CVE-2026-97032 affecting package moby-containerd-cc 1.7.7-17
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107589 CVE-2026-97032 affecting package kata-containers-cc 3.15.0.aks0-21
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...