IOCs

////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // ///////////////////////// ///////////////////////...

mutiny-fuzzer

快速入门：Mutiny 教程 博客文章地址： http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html 此 YouTube 视频演示链接： https://www.youtube.com/watch?v=FZyR6MgJCUs 更多面向模糊测试活动/反馈/测试工具的功能： https://github.com/Cisco-Talos/mutiny-fuzzer/tree/experiment Mutiny Fuzzing Framework Mutiny Fuzzing...

clamav

ClamAV ClamAV® es un motor antivirus de código abierto para detectar troyanos, virus, malware y otras amenazas maliciosas. Documentación y preguntas frecuentes La documentación de ClamAV está alojada en docs.clamav.net. El archivo fuente de cada versión también incluye una copia de la documentaci...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

talos

Chat · Debates · Boletín · Documentación · Probar Ory Network · Empleos Ory Talos es un servidor de claves de API escalable y seguro optimizado para verificación de baja latencia, escalado horizontal y operaciones predecibles. Sigue las mejores prácticas de seguridad establecidas para claves de A...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

CVE-2017-4878-Samples

CVE-2017-4878-Samples Muestras de CVE-2017-4878 - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Exploits de Flash fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 -...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

CVE-2018-7849

CVE-2018-7849 Productos Afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las Versiones Schneider Electric Modicon Quantum Todas las Versiones Referencias...

CVE-2018-7854

CVE-2018-7854 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 Usage root@kitploit: python...

remcos-decoder

Talos Decryptor POC para Remcos RAT versión 2.0.5 y anteriores Consulta ./remcosdecryptor.py -h para obtener ayuda. Descargo de responsabilidad: Esta herramienta se proporciona sin ninguna garantía. Úsala bajo tu propio riesgo...

cve-2018-4013

cve-2018-4013 cve-2018-4013 poc 简要复现 reference TALOS-2018-0684 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence TODO : exploit...

CVE-2018-7845

CVE-2018-7845 Productos afectados Schneider Electric Modicon M580 Versión 2.80 Schneider Electric Modicon M340 Versión 3.01 Schneider Electric Modicon Premium Versión 3.20 Schneider Electric Modicon Quantum Versión 3.60 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

EUVD-2026-62954

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

EUVD-2026-62955

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390

Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3 expose the add-on's OpenAPI specification through Splunk Web static file paths without requiring authentication. The root cause is that the generated OpenAPI spec is packaged in a static file path that Splunk Web serves u...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, the Talos enrichment REST endpoint accepts the destination for authenticated Splunk management requests from request data, enabling an SSRF attack. A user with the get_talos_enrichment capability can force the instanc...