481 matches found
SweetSecurity
SweetSecurity Scripts para configurar e instalar Bro IDS, Elasticsearch, Logstash, Kibana y Critical Stack en cualquier dispositivo. Para más información sobre la instalación y cómo funciona Sweet Security, consulta la Wiki: https://github.com/TravisFSmith/SweetSecurity/wiki Instalación: sudo...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
ecs-logstash-mappings
Corelight ECS Logstash 管道 本仓库包含 Logstash 管道文件，需配合以下仓库中的安装脚本使用： https://github.com/corelight/ecs-templates 该仓库中的安装脚本将从本仓库下载文件，因此无需也不建议直接使用本仓库。 许可证 这些文件和自动化脚本均以 BSD 许可证开源。详细信息请参阅 COPYING。 Github 仓库定义 Elasticsearch 模板 https://github.com/corelight/ecs-templates Elasticsearch 索引模板、组件模板、ILM 策略、设置和映射 安装...
ecs-mapping
Corelight ECS 摄取管道 本仓库由摄取管道文件组成，这些文件需与以下仓库中的安装脚本配合使用 https://github.com/corelight/ecs-templates 该仓库中的安装脚本会从此仓库下载文件，因此无需也不建议直接使用本仓库。 许可证 这些文件和自动化脚本均以 BSD 许可证开源。详见 COPYING。 GitHub 仓库说明 Elasticsearch 模板 https://github.com/corelight/ecs-templates Elasticsearch 索引模板、组件模板、ILM 策略、设置和映射 安装脚本 Logstash 管道...
CLEANSTART-2026-GB90768 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Multiple security vulnerabilities affect the logstash-exporter package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
CLEANSTART-2026-AJ83096 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Multiple security vulnerabilities affect the logstash-exporter package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
GHSA-C4C3-7FPV-J4Q5 vulnerabilities
Vulnerabilities for packages: sonarqube, ghidra, kayenta-fips, apache-nifi, hadoop-fips, knative-kafka-broker, pinot-fips, request-9047-keycloak-fips, neo4j, zookeeper-fips, keycloak, pinot, hono, kafka, strimzi-kafka-operator, elasticsearch, akhq, logstash, apache-camel-karavan-devmode, cassandr...
CVE-2026-75595 vulnerabilities
Vulnerabilities for packages: sonarqube, ghidra, kayenta-fips, apache-nifi, hadoop-fips, knative-kafka-broker, pinot-fips, request-9047-keycloak-fips, neo4j, zookeeper-fips, keycloak, pinot, hono, kafka, strimzi-kafka-operator, elasticsearch, akhq, logstash, apache-camel-karavan-devmode, cassandr...
GHSA-6QM2-MCQ7-53QP vulnerabilities
Vulnerabilities for packages: kayenta-fips, ruby3.3-jrjackson, pinot-fips, opensearch, spark-kubernetes-operator, zookeeper-fips, apache-hop-fips, guacamole-client, ontop, cassandra, seata, elasticsearch-fips, cass-config-builder, camunda, reposilite, zipkin, apache-tika, apache-tika-fips,...
cve-2026-47859 - MEDIUM - Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS
cve-2026-47859 - MEDIUM - Unbounded memory allocation in RFC6587SyslogDeserializer octet-counted framing — remote DoS...
CVE-2026-19671
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...
EUVD-2026-61160
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...
CVE-2026-56862 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...
GO-2026-6218 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...