CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 è una vulnerabilità di Cross-Site Scripting persistente Stored XSS che interessa le versioni di CTI Transmute precedenti alla release corretta. Il difetto risiede nel pannello delle notifiche, dove i messaggi di notifica contenenti nomi di convert controllati dall'uten...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 Indagine CTI Multi-CVE CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Creato da Pratik Chhetri Data del report: 2026-07-28 📌 Sintesi Esecutiva...

yeti

Yeti Platform Yeti mira a colmare il divario tra professionisti CTI e DFIR fornendo una piattaforma di Intelligence Forense e un pipeline per i team DFIR. È nato dalla frustrazione di dover rispondere alla domanda "dove ho già visto questo artefatto?" o "come cerco gli IOC relativi a questa...

exist

EXIST Sistema di aggregazione di informazioni esterne contro le minacce informatiche ⚠️ Questo repository non è più mantenuto / archiviato. I problemi di sicurezza non verranno risolti. EXIST è un'applicazione web per aggregare e analizzare CTI intelligence sulle minacce informatiche. EXIST è...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

Antiphishing

DONA - VETTORI DASHBOARD - CONTRIBUTI - INVIA UN VETTORE - REST API CTI - WIKI Intelligence predittiva anti-phishing per Suricata: blocca l'avversario al giorno zero Antiphishing è un'infrastruttura open-source GPLv3 di Cyber Threat Intelligence CTI e un ruleset Suricata progettato per...

ProHunter

📋 Übersicht Dieses Projekt ist ein Kernmodul des ProHunter-Systems, das hauptsächlich dazu dient, bösartige Bewertungen von Bedrohungsgraphen durchzuführen, die aus dem PPG-Modul entnommen wurden. Die Hauptidee dieser Methode besteht darin, ungenaues Graphvektor-Matching zu verwenden, um die...

ThreatPad

ThreatPad Una piattaforma collaborativa di prendere appunti in tempo reale, costruita per i team di Cyber Threat Intelligence CTI e operazioni di sicurezza. ThreatPad combina la velocità degli strumenti di produttività moderni con funzionalità specifiche per CTI: estrazione automatica di IOC,...

standalone_tdo

TDO Extrator Autônomo Uma ferramenta poderosa e autônoma de linha de comando para extrair Inteligência de Ameaças Cibernéticas CTI de documentos usando Modelos de Linguagem de Grande Escala LLMs com capacidades avançadas de saída estruturada. 🚀 Recursos Suporte Multiformato de Documentos : Arquiv...

CVE-2026-73162

Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: /account/follow /account/deletenotification /account/marknotificationread /account/markallread These endpoints require authentication, but before the fix they could be invoked with simple GET...

CVE-2026-73161

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

CVE-2026-73160

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetchmispevent and /mispsearchevents endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domain...

CVE-2026-73159

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

CVE-2026-73157

Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface using HTML interpolation. Because fields such as event IDs, event information, organization names, tags, tag colors, TLP labels, distribution labels, and error/flash text may be...

CVE-2026-73158

Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can contain style properties that are later consumed by Pivotick, and Pivotick interprets svgIcon as HTML. Because saved configurations may be created by one user and later displayed to...

CVE-2026-73162

CVE-2026-73162 affects MISP cti-transmute where several state-changing endpoints were exposed as unauthenticated GET requests: /account/follow, /account/delete_notification, /account/mark_notification_read, and /account/mark_all_read. The underlying issue is CSRF risk because these authenticated ...

EUVD-2026-55994

Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: /account/follow /account/deletenotification /account/marknotificationread /account/markallread These endpoints require authentication, but before the fix they could be invoked with simple GET...

CVE-2026-73162 cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes

Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: /account/follow /account/deletenotification /account/marknotificationread /account/markallread These endpoints require authentication, but before the fix they could be invoked with simple GET...

CVE-2026-73162 cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes

Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: /account/follow /account/deletenotification /account/marknotificationread /account/markallread These endpoints require authentication, but before the fix they could be invoked with simple GET...

EUVD-2026-55993

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...