ioc_value,ioc_type,severity,description,product,source,url,date,tags,stix_indicator_id,section,confidence
CVE-2026-124194,cve,CRITICAL,Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.,Office (Microsoft),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-10,kev;cisa;active-exploitation,indicator--00000000-00000001-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-111793,cve,CRITICAL,Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.,Webtop Media Transcoder (Openwave Messaging Limited),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-10,kev;cisa;active-exploitation,indicator--00000000-00000002-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-20320,cve,CRITICAL,"Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.",BroadWorks (Cisco),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-10,kev;cisa;active-exploitation,indicator--00000000-00000003-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-111560,cve,CRITICAL,"Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vu",Multiple Products (Barracuda Networks),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-10,kev;cisa;active-exploitation,indicator--00000000-00000004-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-116606,cve,CRITICAL,"Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backu",Barracuda Email Security Gateway (ESG) (Barracuda Networks),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-10,kev;cisa;active-exploitation,indicator--00000000-00000005-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-125350,cve,CRITICAL,Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that u,Chromium (Google),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-10,kev;cisa;active-exploitation,indicator--00000000-00000006-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-102895,cve,CRITICAL,"GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code",GPUStack (GPUStack),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-09,kev;cisa;active-exploitation,indicator--00000000-00000007-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-123158,cve,CRITICAL,OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.,OpenSSH (OpenBSD),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-09,kev;cisa;active-exploitation,indicator--00000000-00000008-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-116779,cve,CRITICAL,"SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.",FreeSwitch (SignalWire),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-09,kev;cisa;active-exploitation,indicator--00000000-00000009-0000-0000-0000-000000000000,CISA KEV (KNOWN EXPLOITED VULNERABILITY),100
CVE-2026-123218,cve,CRITICAL,"IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.",Aspera Faspex (IBM),CISA KEV Catalog,https://www.cisa.gov/known-exploited-vulnerabilities-catalog,2026-11-09,kev;cisa;active-exploitation,indicator--00000000-00000010-0000-0000-0000-000000000000,PHISHING URL,100
http://netflix-clone-manishbisht123.vercel.app/,other,CRITICAL,Active phishing URL: http://netflix-clone-manishbisht123.vercel.app/,,OpenPhish,http://netflix-clone-manishbisht123.vercel.app/,,phishing;openphish,indicator--00000000-00000011-0000-0000-0000-000000000000,PHISHING URL,100
https://phenomenal-gnome-11223a.netlify.app/,other,CRITICAL,Active phishing URL: https://phenomenal-gnome-11223a.netlify.app/,,OpenPhish,https://phenomenal-gnome-11223a.netlify.app/,,phishing;openphish,indicator--00000000-00000012-0000-0000-0000-000000000000,PHISHING URL,100
https://808.top-qwe123-asd456-zxc789.yoqceqmcqoosawsu.com/downapp,other,CRITICAL,Active phishing URL: https://808.top-qwe123-asd456-zxc789.yoqceqmcqoosawsu.com/downapp,,OpenPhish,https://808.top-qwe123-asd456-zxc789.yoqceqmcqoosawsu.com/downapp,,phishing;openphish,indicator--00000000-00000013-0000-0000-0000-000000000000,PHISHING URL,100
https://petsonpoint.co.uk/,other,CRITICAL,Active phishing URL: https://petsonpoint.co.uk/,,OpenPhish,https://petsonpoint.co.uk/,,phishing;openphish,indicator--00000000-00000014-0000-0000-0000-000000000000,PHISHING URL,100
http://finance.petsonpoint.co.uk/,other,CRITICAL,Active phishing URL: http://finance.petsonpoint.co.uk/,,OpenPhish,http://finance.petsonpoint.co.uk/,,phishing;openphish,indicator--00000000-00000015-0000-0000-0000-000000000000,PHISHING URL,100
https://365.qwe123-asd456-zxc789.osqcoyqssguomueq.com/downapp,other,CRITICAL,Active phishing URL: https://365.qwe123-asd456-zxc789.osqcoyqssguomueq.com/downapp,,OpenPhish,https://365.qwe123-asd456-zxc789.osqcoyqssguomueq.com/downapp,,phishing;openphish,indicator--00000000-00000016-0000-0000-0000-000000000000,PHISHING URL,100
https://brilliant-tanuki-dd87f9.netlify.app/,other,CRITICAL,Active phishing URL: https://brilliant-tanuki-dd87f9.netlify.app/,,OpenPhish,https://brilliant-tanuki-dd87f9.netlify.app/,,phishing;openphish,indicator--00000000-00000017-0000-0000-0000-000000000000,PHISHING URL,100
https://shopee896.blogspot.com/,other,CRITICAL,Active phishing URL: https://shopee896.blogspot.com/,,OpenPhish,https://shopee896.blogspot.com/,,phishing;openphish,indicator--00000000-00000018-0000-0000-0000-000000000000,PHISHING URL,100
https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/ship/index.html,other,CRITICAL,Active phishing URL: https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/ship/index.html,,OpenPhish,https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/ship/index.html,,phishing;openphish,indicator--00000000-00000019-0000-0000-0000-000000000000,DOMAIN,100
netflix-clone-manishbisht123.vercel,domain-name,CRITICAL,Phishing domain: netflix-clone-manishbisht123.vercel,,OpenPhish,http://netflix-clone-manishbisht123.vercel.app/,,phishing;openphish;domain,indicator--00000000-00000020-0000-0000-0000-000000000000,DOMAIN,100
phenomenal-gnome-11223a.netlify,domain-name,CRITICAL,Phishing domain: phenomenal-gnome-11223a.netlify,,OpenPhish,https://phenomenal-gnome-11223a.netlify.app/,,phishing;openphish;domain,indicator--00000000-00000021-0000-0000-0000-000000000000,DOMAIN,100
top-qwe123-asd456-zxc789.yoqceqmcqoosawsu,domain-name,CRITICAL,Phishing domain: top-qwe123-asd456-zxc789.yoqceqmcqoosawsu,,OpenPhish,https://808.top-qwe123-asd456-zxc789.yoqceqmcqoosawsu.com/downapp,,phishing;openphish;domain,indicator--00000000-00000022-0000-0000-0000-000000000000,DOMAIN,100
petsonpoint.co,domain-name,CRITICAL,Phishing domain: petsonpoint.co,,OpenPhish,https://petsonpoint.co.uk/,,phishing;openphish;domain,indicator--00000000-00000023-0000-0000-0000-000000000000,DOMAIN,100
finance.petsonpoint,domain-name,CRITICAL,Phishing domain: finance.petsonpoint,,OpenPhish,http://finance.petsonpoint.co.uk/,,phishing;openphish;domain,indicator--00000000-00000024-0000-0000-0000-000000000000,DOMAIN,100
qwe123-asd456-zxc789.osqcoyqssguomueq,domain-name,CRITICAL,Phishing domain: qwe123-asd456-zxc789.osqcoyqssguomueq,,OpenPhish,https://365.qwe123-asd456-zxc789.osqcoyqssguomueq.com/downapp,,phishing;openphish;domain,indicator--00000000-00000025-0000-0000-0000-000000000000,DOMAIN,100
brilliant-tanuki-dd87f9.netlify,domain-name,CRITICAL,Phishing domain: brilliant-tanuki-dd87f9.netlify,,OpenPhish,https://brilliant-tanuki-dd87f9.netlify.app/,,phishing;openphish;domain,indicator--00000000-00000026-0000-0000-0000-000000000000,DOMAIN,100
shopee896.blogspot,domain-name,CRITICAL,Phishing domain: shopee896.blogspot,,OpenPhish,https://shopee896.blogspot.com/,,phishing;openphish;domain,indicator--00000000-00000027-0000-0000-0000-000000000000,DOMAIN,100
uspss.pages,domain-name,CRITICAL,Phishing domain: uspss.pages,,OpenPhish,https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/ship/index.html,,phishing;openphish;domain,indicator--00000000-00000028-0000-0000-0000-000000000000,DOMAIN,100