indicator-intelligence

Indicator-Intelligence NOTE : Vous devez absolument l'utiliser pour des activités légales. Veuillez consulter ; USAGEPOLICY.md LICENSE Description Trouve les domaines associés et les adresses IPv4 pour faire du renseignement sur les menaces après que Indicator-Intelligence a collecté les fichiers...

Gotanda

Gotanda Gotanda est une extension Web OSINT Open Source Intelligence pour Firefox/Chrome. Cette extension Web peut rechercher des informations OSINT à partir d'indicateurs de compromission IOC dans une page Web. IP, Domaine, URL, SNS, etc. Ce référentiel fait partie de l'apprentissage et de la...

xioc

xioc Extrait les indicateurs de compromission d'un texte, y compris les versions « échappées » comme hxxp://banana.com, 1.1.1.1 et phish at malicious dot com. Installation Téléchargez un binaire précompilé depuis https://github.com/assafmo/xioc/releases...

MalPipe

MalPipe root@kitploit: //\ | | / / \ / | |/ // | ' \ / \ / //\ \ | | / /| | | | / / /,|/ || ./ | || MalPipe est un framework modulaire de collecte et de traitement de malwares et d'indicateurs. Il est conçu pour extraire des malwares, domaines, URL et adresses IP de multiples flux, enrichir...

MISP

MISP - Plateforme de partage de renseignements sur les menaces MISP est une solution logicielle open source permettant de collecter, stocker, distribuer et partager des indicateurs et des menaces de cybersécurité liés à l’analyse d’incidents de cybersécurité et à l’analyse de logiciels...

CVE-2025-40634

CVE-2025-40634 Le routeur TP-Link Archer AX50 est vulnérable à un débordement de tampon basé sur la pile dans sa version de firmware 1.0.14 Build 20240108 rel.426554555, conduisant à une exécution de code à distance à la fois côté LAN et côté WAN. Cette vulnérabilité a la même cause racine que...

ioc-finder

IOC Finder Извлечение индикаторов компрометации также известных как «observables» или «network data» — например, URL-адреса, адреса электронной почты и т. д. из текста. 📖 Документация она интерактивная!...

ExtendIntel

ExtendIntel Этот пакет расширяет пакет Intel для ведения журнала с большим количеством полей Если файл intel содержит следующие поля, данные автоматически будут добавлены в intel.log. threatscore verdict verdictsource confidence desc lastseen firstseen url reports campaigns associated category...

IoC_Attack_ESXi_Feb_2023

IoCAttackESXiFeb2023 Коллекция доступных IoC, связанных с атаками на инфраструктуры ESXi, произошедшими по состоянию на пятницу, 3 февраля 2023 года. Новости Вот несколько ссылок, касающихся этой атаки: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2023-ALE-015/...

libtaxii

libtaxii Trusted Automated eXchange of Indicator Information TAXII™ v1.x メッセージを処理し、TAXII サービスを呼び出すための Python ライブラリです。 :Source: https://github.com/TAXIIProject/libtaxii/ :Documentation: https://libtaxii.readthedocs.io/ :Information: https://taxiiproject.github.io/ :Download:...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: AlmaLinux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:AlmaLinux-18388...

ALSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: AlmaLinux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:AlmaLinux-18388...

CVE-2026-58162 Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates

The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client SNI. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

CVE-2026-54590

creationtimestamp| type| source ---|---|--- 2026-07-08 22:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67v3wjmr2z 2026-07-20 09:53:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t 2026-07-20 09:53:36+00:00| seen|...

openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI Generic Security Service Application Programming Interface indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific...

CVE-2026-53256

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcommconnectind rfcommgetsockbychannel scans rfcommsklist under the list lock, but returns the selected listener after dropping that lock without taking a reference. rfcommconnectind th...

CVE-2026-53622

CVE-2026-53622 concerns Traefik’s HTTP/3 (QUIC) TLS configuration selection. When HTTP/3 is enabled, the TLS handshake uses an exact, case-sensitive lookup of the SNI to choose a TLS config, which fails to match wildcard hosts or mixed-case hostnames. If a router enforces mTLS via TLSOptions and ...

CVE-2026-55654 Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI Generic Security Service Application Programming Interface indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific...

CVE-2026-10641

Zephyr Bluetooth Classic HFP HF CIND parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write during +CIND=?/+CIND: handling. cind_handle_values() writes hf-ind_table[index] = i without verifying index is within the 20-element int8_t ind_table[]. A remote attacker could sen...

PT-2026-50394

Name of the Vulnerable Software and Affected Versions Zephyr versions 1.7 through 4.4.0 Description The Bluetooth Classic Hands-Free Profile HFP Hands-Free role parser in subsys/bluetooth/host/classic/hfp hf.c contains an out-of-bounds write. During Service Level Connection setup, the Hands-Free ...