threat-intel

threat-intel This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media. Organization This repository is organized by year, within that folder will be a subfolder named by the month and title of the media which is supported by its...

threat-intel

threat-intel Este repositorio contiene IoC relacionados con las publicaciones públicas de inteligencia de amenazas de Volexity. Las publicaciones de blog públicas relacionadas con estos IoC se pueden encontrar en el sitio web de Volexity. En el pasado, este repositorio también se utilizaba para...

Mimir

Mimir Interfaz de Inteligencia de Amenazas OSINT - Nombrado en honor al antiguo dios nórdico del conocimiento. Mimir funciona como una CLI para HoneyDB que, en resumen, es un pool agregativo de inteligencia de amenazas OSINT. Al iniciar el programa se accede a un menú cuyas opciones son las...

Open-Source-Threat-Intel-Feeds

Free Threat Intel/IOC Feeds This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. The CSV ThreatIntelFeeds is stored in a structured manner based on the Vendor, Description, Category and URL. The vendors offering ThreatIntelFeeds a...

Log4Shell

CVE-2021-44228: Resumen de Investigación de Seguridad Log4j / Log4Shell Este repositorio contiene todos los recursos recopilados que utilizamos durante nuestra Respuesta a Incidentes sobre CVE-2021-44228 y CVE-2021-45046, también conocido como Log4Shell. Inteligencia de Amenazas Mitigaciones /...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2026-54330

creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26 2026-08-20 14:49:42+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t...

CVE-2026-70740

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfatdrhbq2p 2026-08-19 06:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg3mi2elj2p 2026-08-19 17:49:06+00:00| seen|...

CVE-2026-65529

creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

EUVD-2026-57422

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952

Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

PT-2026-71210

Name of the Vulnerable Software and Affected Versions OpenSearch Security Analytics plugin affected versions not specified Description Missing input validation in the threat intelligence feed parser allows an authenticated remote user to perform server-side request forgery SSRF—a technique where ...

threat-intel-toolkit

Threat Intel Toolkit A reusable, shareable bundle for defen...

CVE-2026-70319

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:12+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:16+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:09+00:00| seen|...

EUVD-2026-55633

CTI-Transmute is affected by a stored cross-site scripting XSS vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled values originating from converted CTI data were passed to multiple HTML-parsing sinks in the graph user interface without...