57 matches found
Mimir
Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. root@kitploit: 1. Fetch Threat Feed 5...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
Log4Shell
CVE-2021-44228：Log4j / Log4Shell 安全研究总结 此仓库包含我们在针对 CVE-2021-44228 和 CVE-2021-45046（即 Log4Shell）进行事件响应时使用的所有收集资源。 威胁情报 缓解措施/修复 恶意软件报告 安全公告 IOCs / 回调域名 / IP 地址 蜜罐 载荷/混淆/WAF 绕过 漏洞扫描 利用 培训 感谢 Malware Unicorn 提供的 logo！ 来源：https://malwareunicorn.org/log4shelllogo.png...
threat-intel
threat-intel このリポジトリには、Volexityの公開脅威インテリジェンスブログ記事に関連するIoCが含まれています。 これらのIoCに関連する公開ブログ記事は、VolexityのWebサイトで見つけることができます。 以前はこのリポジトリは、Volexityが公開したツールを保存するためにも使用されていました。これらのツールは現在、各ツール専用のリポジトリに移動されており、Volexity GitHubページで見つけることができます。 IOCs これらは年ごとに整理されており、各年の中の各フォルダは特定の記事に対応しています。...
threat-intel
threat-intel Este repositório contém itens complementares, incluindo IOCs e assinaturas discutidos em postagens do blog da Huntress e outras mídias. Organização Este repositório é organizado por ano; dentro dessa pasta haverá uma subpasta nomeada pelo mês e pelo título da mídia cujo conteúdo é...
CVE-2026-54330
creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26 2026-08-20 14:49:42+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t...
CVE-2026-70740
creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfatdrhbq2p 2026-08-19 06:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg3mi2elj2p 2026-08-19 17:49:06+00:00| seen|...
CVE-2026-65529
creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...
CVE-2026-18952
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952
Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.
CVE-2026-18952
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
EUVD-2026-57422
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
PT-2026-71210
Name of the Vulnerable Software and Affected Versions OpenSearch Security Analytics plugin affected versions not specified Description Missing input validation in the threat intelligence feed parser allows an authenticated remote user to perform server-side request forgery SSRF—a technique where ...
threat-intel-toolkit
Threat Intel Toolkit A reusable, shareable bundle for defen...
CVE-2026-70319
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:12+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:16+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:09+00:00| seen|...
EUVD-2026-55633
CTI-Transmute is affected by a stored cross-site scripting XSS vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled values originating from converted CTI data were passed to multiple HTML-parsing sinks in the graph user interface without...