cc-ddos

Please Star this repo if you find it useful, because it's free : Donation information in the release The script still works normally, tested in 2025. cc-ddos A Python script to DDOS a website using multiple HTTP Flood methods, a normal website only needs 5 seconds to completely crash! How to Use:...

investigations

Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...

threat-hunting-guide

Corelight 위협 헌팅 가이드 작업 복사본 이 저장소는 Corelight 위협 헌팅 가이드의 작업 데이터 역할을 합니다. 여기에서 유지 관리되는 원본 텍스트는 주기적으로 편집, 레이아웃, 그래픽 디자인을 거친 후 PDF 파일로 게시되어 Corelight, Inc.“Corelight”에 의해 배포됩니다. 이러한 작업에 정해진 일정은 없지만, 역사적으로 612개월마다 새 릴리스가 이루어집니다. Corelight 위협 헌팅 가이드의 최신 버전을 원한다면 여기에서 찾을 수 있습니다. PDF 버전은 출판 시점의 콘텐츠 스냅샷이며 ...

burp-cc-bridge

CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...

CVE-2015-6420

CVE-2015-6420 역직렬화 취약점 참조 Java 역직렬화 취약점 - CC 이용 체인 분석...

phishurl-list

JPCERT/CC의 피싱 URL 데이터셋 컬럼 세부 정보 date: JPCERT/CC가 확인한 날짜 URL: 피싱 사이트의 전체 URL description: 위조된 브랜드에 대한 정보 통계 페이지 https://jpcertcc.github.io/phishurl-list/...

CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17

CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17. A patched version of the package is available...

GHSA-8VVX-RFF5-P5RQ Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS

Submission metadata | Field | Value | |---|---| | Ecosystem | npm | | Package | nodemailer | | Repository | https://github.com/nodemailer/nodemailer | | Tested commit | 40d52215aac65b811d7e131bc916f68605efd9d2 | | Current tested version | 10.0.1 | | Confirmed vulnerable versions | 2.7.2, 3.0.0,...

CVE-2026-100702 Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

AZL-104081 CVE-2026-53493 affecting package moby-containerd-cc 1.7.7-17

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

CVE-2026-84304 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21

CVE-2026-84304 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21. A patched version of the package is available...

CVE-2026-84445 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21

CVE-2026-84445 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21. A patched version of the package is available...

AZL-103460 CVE-2026-93601 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

AZL-103463 CVE-2026-93602 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...

AZL-103466 CVE-2026-93600 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

AZL-103469 CVE-2026-93599 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bitstringflags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so rawbits.len - 1 underflows on t...

CVE-2026-92801

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands by triggering card actions in admitted chats, bypassing the per-user access controls that protect the text message handle...

AZL-103179 CVE-2026-81869 affecting package kata-containers-cc 3.15.0.aks0-21

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

CVE-2026-92801 cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actions

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands by triggering card actions in admitted chats, bypassing the per-user access controls that protect the text message handle...

CVE-2026-92801

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. While the text message handler applies per-user access controls, the card action handler does not, allowing attackers with low privileges in admitted chats to ...