dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

ecs-mapping

Corelight ECS Ingest 파이프라인 이 저장소는 다음 저장소의 설치 스크립트와 함께 사용해야 하는 Ingest 파이프라인 파일로 구성되어 있습니다. https://github.com/corelight/ecs-templates 해당 저장소의 설치 스크립트는 이 저장소에서 파일을 다운로드하므로, 이 저장소를 직접 사용할 필요가 없으며 권장되지도 않습니다. 라이선스 파일과 자동화 스크립트는 BSD 라이선스에 따라 오픈소스로 제공됩니다. 자세한 내용은 COPYING을 참조하세요. GitHub 저장소 정의...

ecs-logstash-mappings

Corelight ECS Logstash 파이프라인 이 저장소는 다음 저장소의 설치 스크립트와 함께 사용해야 하는 Logstash 파이프라인 파일로 구성되어 있습니다. https://github.com/corelight/ecs-templates 해당 저장소의 설치 프로그램은 이 저장소에서 파일을 다운로드하므로, 이 저장소를 직접 사용할 필요도 없고 권장되지도 않습니다. 라이선스 파일과 자동화 스크립트는 BSD 라이선스에 따라 오픈소스로 제공됩니다. 자세한 내용은 COPYING을 참조하세요. Github 저장소 정의...

SweetSecurity

SweetSecurity 모든 디바이스에 Bro IDS, Elasticsearch, Logstash, Kibana, Critical Stack을 설치하고 설정하는 스크립트입니다. 설치 및 Sweet Security 작동 방식에 대한 자세한 내용은 Wiki를 참조하세요: https://github.com/TravisFSmith/SweetSecurity/wiki 설치: sudo python setup.py 선택한 설치 유형에 적합한 정보를 입력하라는 프롬프트를 따릅니다. 새로운 기능: 모듈식 설치 - 모든 도구를 한 대의 디바이스...

CVE-2026-106122 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-nifi, logstash, conductor-fips, nuxeo, thingsboard, druid, traccar, traccar-fips, conductor...

GHSA-7822-RCF6-97FX vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-nifi, logstash, conductor-fips, nuxeo, thingsboard, druid, traccar, traccar-fips, conductor...

CVE-2026-106123 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-nifi, logstash, conductor-fips, nuxeo, thingsboard, druid, traccar, traccar-fips, conductor...

GHSA-H6W7-QMCM-Q6XR vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-nifi, logstash, conductor-fips, nuxeo, thingsboard, druid, traccar, traccar-fips, conductor...

GHSA-CQGH-8P3P-MX4M vulnerabilities

Vulnerabilities for packages: cassandra-reaper, logstash, conductor-fips, thingsboard, druid, conductor...

CVE-2026-106121 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, logstash, conductor-fips, thingsboard, druid, conductor...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: dependency-track, infinispan, apache-nifi, trino, logstash, opensearch, scala, akhq, apache-tika, druid, cass-config-builder, strimzi-kafka-operator, wildfly, apicurio-registry, spdx-tools-java, spark, keycloak, flyway, tez, apache-nifi-registry, gradle,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: dependency-track, infinispan, apache-nifi, trino, logstash, opensearch, scala, akhq, apache-tika, druid, cass-config-builder, strimzi-kafka-operator, wildfly, apicurio-registry, spdx-tools-java, spark, keycloak, flyway, tez, apache-nifi-registry, gradle,...

Security Bulletin: Due to Logstash, IBM Cloud Pak System is affected by Improper Limitation of a Pathname to a Restricted Directory [CVE-2026-33466]

Summary Vulnerability was found in Logstash shipped with IBM Cloud Pak System. Vulnerability was addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-33466 DESCRIPTION: Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: camunda, confluent-kafka-jre-bcfips, camunda-zeebe, airbyte-platform-fips, datahub-gms, dependency-track, wazuh-indexer, cruise-control, zipkin, strimzi-kafka-oauth-fips, apache-activemq-fips, jenkins, kayenta, apache-tika, knative-kafka-broker-fips, cassandra-fips,...

CVE-2026-77619

A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload...

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2026-77620

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...

EUVD-2026-84508

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...

CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...

CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...