threat-intel

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. Public blog posts related to these IoCs can be found on the Volexity website. In the past this repository was also used to store tools published by Volexity. These tools have now been moved into...

threat-intel

threat-intel This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media. Organization This repository is organized by year, within that folder will be a subfolder named by the month and title of the media which is supported by its...

Mimir

Mimir Interfaz de Inteligencia de Amenazas OSINT - Nombrado en honor al antiguo dios nórdico del conocimiento. Mimir funciona como una CLI para HoneyDB que, en resumen, es un pool agregativo de inteligencia de amenazas OSINT. Al iniciar el programa se accede a un menú cuyas opciones son las...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

AERA

AERA: Autonomous Exploit Research Assistant !Python 3.11+...

Open-Source-Threat-Intel-Feeds

Free Threat Intel/IOC Feeds This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. The CSV ThreatIntelFeeds is stored in a structured manner based on the Vendor, Description, Category and URL. The vendors offering ThreatIntelFeeds a...

Log4Shell

CVE-2021-44228: Log4j / Log4Shell セキュリティ研究サマリー このリポジトリには、CVE-2021-44228およびCVE-2021-45046（別名Log4Shell）に関するインシデント対応で使用したすべての収集リソースが含まれています。 脅威インテリジェンス 緩和策/修正 マルウェアレポート アドバイザリ IOC/コールバックドメイン/IPアドレス ハニーポット ペイロード/難読化/WAF回避 脆弱性スキャン エクスプロイテーション トレーニング ロゴを提供してくれたMalware Unicornに感謝します！ 出典:...

CVE-2026-54330

creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26 2026-08-20 14:49:42+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t...

CVE-2026-70740

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfatdrhbq2p 2026-08-19 06:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg3mi2elj2p 2026-08-19 17:49:06+00:00| seen|...

CVE-2026-65529

creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952

Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.

EUVD-2026-57422

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

PT-2026-71210

Name of the Vulnerable Software and Affected Versions OpenSearch Security Analytics plugin affected versions not specified Description Missing input validation in the threat intelligence feed parser allows an authenticated remote user to perform server-side request forgery SSRF—a technique where ...

threat-intel-toolkit

Threat Intel Toolkit A reusable, shareable bundle for defen...

CVE-2026-70319

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:12+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:16+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:09+00:00| seen|...