cart

CaRT Komprimierter und RC4-Transport Das CaRT-Dateiformat wird verwendet, um Malware und die zugehörigen Metadaten zu speichern/zu übertragen. Es entschärft die Malware, sodass sie nicht ausgeführt werden kann, und verschlüsselt sie, sodass Antivirensoftware die CaRT-Datei nicht als Malware...

bandjacks

Bandjacks Cyber Threat Defense World Modeling System Übersicht Bandjacks ist ein umfassendes Cyber-Bedrohungsinformationssystem CTI, das: MITRE ATT&CK-Techniken aus Bedrohungsberichten in 12-40 Sekunden extrahiert Einen Wissensgraphen von Bedrohungsakteuren, Techniken und Abwehrmaßnahmen erstellt...

attackintel

अद्यतन 26 नवंबर 2018 MITRE ने ATT&CK API कार्यक्षमता को अप्रचलित कर दिया है और इसे जल्द ही बंद कर दिया जाएगा। वे STIX का उपयोग करने लगे हैं। मेरा कोड संदर्भ के लिए उपलब्ध रहेगा, लेकिन आप मेरे ATT&CK Intel वेबऐप को देख सकते हैं, जो विकास के प्रारंभिक चरण में है और समान जानकारी प्रदान करता है। लिंक...

KoodousFinder

KoodousFinder Uma ferramenta simples que permite aos usuários pesquisar e analisar aplicativos Android em busca de potenciais ameaças de segurança e vulnerabilidades. Conta e Chave de API Crie uma conta Koodous e obtenha sua chave de API em https://koodous.com/settings/developers Instalação $ pip...

scambuster

Automatisierte Scambaiting-Honeypot- und Threat-Intelligence-Plattform...

ThreatPad

ThreatPad Eine kollaborative Echtzeit-Notizplattform, entwickelt für Cyber Threat Intelligence CTI und Sicherheitsoperationsteams. ThreatPad kombiniert die Geschwindigkeit moderner Produktivitätstools mit CTI-spezifischen Fähigkeiten: IOC-Autoextraktion, STIX 2.1-Export, strukturierte...

zettelforge

ZettelForge Das einzige agentische Gedächtnissystem, das für Cyber Threat Intelligence entwickelt wurde. Wenn ein erfahrener Analyst geht, verschwinden zwei oder drei Jahre Kontext mit ihm – Kundenumgebungen, frühere Untersuchungen, TTPs von Akteuren, False-Positive-Muster, jedes mühsam erworbene...

dugganusa-ietf

DugganUSA — IETF Hackathon Contributions Real-world threat-intelligence contributions from DugganUSA LLC to the IETF Hackathon, offered to project champions as empirical grounding for standards work. We are a bootstrapped threat-intelligence shop. We run a public STIX 2.1 feed, an edge-blocking...

darwis-taxii

DARWIS TAXII Un server TAXII Trusted Automated eXchange of Indicator Information ad alte prestazioni scritto in Rust. Porting in Rust di EclecticIQ OpenTAXII con piena compatibilità del database. Funzionalità TAXII 1.x - Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 - API...

attack-stix-data

ATT&CK® STIX-Daten MITRE ATT&CK ist eine weltweit zugängliche Wissensdatenbank über Taktiken und Techniken von Angreifern, die auf Beobachtungen aus der realen Welt basiert. Die ATT&CK-Wissensdatenbank wird als Grundlage für die Entwicklung spezifischer Bedrohungsmodelle und Methoden im privaten...

CVE-2026-77761

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77751

A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining the configured MISP object-template...

CVE-2026-77755

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

CVE-2026-77761

misp-stix is a Python library for converting STIX documents to MISP events. A parser state isolation flaw allows per-document state (galaxies, galaxy clusters, passive DNS records, references, package titles, dates, and timestamps) to persist across conversions when the same parser instance is re...

CVE-2026-77761 Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

EUVD-2026-63883

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77761 Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77755 Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

EUVD-2026-63881

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

CVE-2026-77755

misp-stix is a Python library used by MISP for importing STIX 1 and STIX 2 documents. Two distinct flaws allow denial-of-service: (1) the import code used sys.exit() for parsing failures, which raises SystemExit (a BaseException subclass) that bypasses standard exception handlers, causing uncontr...