opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

nightingale

오픈소스 알림 전문가 English | 中文 🎯 Nightingale이란 무엇인가 Nightingale은 알림alerting에 초점을 맞춘 오픈소스 모니터링 프로젝트입니다. Grafana와 유사하게 Nightingale도 다양한 기존 데이터 소스를 연결할 수 있습니다. 다만 Grafana가 시각화에 중점을 두는 반면, Nightingale은 알림 엔진과 알람의 처리 및 배포에 더 중점을 둡니다. 💡 Nightingale은 이제 기본적으로 MCP를 지원합니다. 서버 자체가 /mcp에 내장 MCP 엔드포인트를 노출하므로, AI...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

CVE-2026-105113

The Nezha Dashboard (versions 1.8.0 before 2.3.13) is vulnerable to an improper locking issue (CWE-667). The root cause is a non-deferred mutex unlock that leaks during a nil-map panic path . An authenticated non-admin member can trigger this by making four specific notification API calls, result...

EUVD-2026-92016

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alerting subsystem. Attackers can concurrently call the notification-group and batch-delete endpoints with oversized id lists to widen the race a...

CVE-2026-105112

The Nezha monitoring agent, versions 1.8.0 before 2.3.13 , is vulnerable to a lock-order inversion within the UpdateGroup and DeleteGroup functions. This flaw allows authenticated non-admin users to trigger a deadlock in the alerting subsystem . By concurrently calling the notification-group and ...

log4j-honeypot-flask

log4j-honeypot-flask 内部ネットワーク用ハニーポット。攻撃者や内部関係者が log4j CVE-2021-44228 を利用してネットワークをスキャンしているかどうかを検出します。 これは、ワークステーションまたはサーバーにインストールして使用できます。Python スクリプト app/app.py を直接実行する方法（python3、Flask、Requests が必要）か、Docker コンテナとして実行する方法があります。 いくつかの環境変数を設定する必要があります（またはスクリプトに直接ハードコードすることもできます）: WEBHOOKURL=通知を受け取る...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

netsentryx

NetSentryx PRO 🛡️ AI 기반의 고성능 실시간 네트워크 관측 및 위협 탐지 엔진 NetSentryx PRO는 차세대 이벤트 기반 네트워크 모니터링 및 위협 인텔리전스 플랫폼입니다. 규칙 기반 시그니처와 PyTorch 딥 오토인코더를 결합하여 10ms 미만의 패킷 및 넷플로우 이상 탐지, 자동화된 다중 채널 경고Slack, Discord, Email, 그리고 대화형 실시간 SOC 대시보드를 제공합니다. 🏗️ 시스템 아키텍처 다음 흐름 다이어그램은 데이터 수집, 실시간 딥러닝 추론, 경고 파이프라인, 그리고...

reactor

Reactor Reactor는 오픈소스 프로젝트 ElastAlert의 포크로 시작되었습니다. 이 프로젝트의 관리자는 ElastAlert의 변경 사항추가 알리퍼alerter는 제외을 주의 깊게 살펴보고 관련 버그 수정 사항이 패치되고 유용한 기능이 포팅되도록 해야 합니다. Reactor는 사용자 지정 필터가 포함된 일련의 규칙을 받아 일치하는 항목에 대해 알림을 보내는 알림 엔진입니다. Reactor는 음소거된 알림을 반복 알림 정보로 자동 업데이트합니다. ElastAlert 패치 기록 액세스한 날짜| 커밋| 비고...

netsentryx — Updated!

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

krane v0.1.6

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

SUSE SLES15 Security Update : grafana (SUSE-SU-2026:3718-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3718-1 advisory. grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: - CVE-2026-39882: Prevent memory exhaustion DoS in...

Security update for grafana

This update for grafana fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters bsc1274217 CVE-2026-33382: Limit the size of the request body before processing...

Security update for Multi-Linux Manager Client Tools - Monitoring stack

This update fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints bsc1271331 - version 12.4.4 CVE-2025-12141: Fixed information leakage...

Grafana Alerting: Datasource query authorization bypass via spoofed queryType

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana’s configured...

Kibana 8.x < 8.19.20 / 9.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-92 / ESA-2026-98 / ESA-2026-100 / ESA-2026-104 / ESA-2026-105 / ESA-2026-106 / ESA-2026-110)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-92, ESA-2026-98, ESA-2026-100, ESA-2026-104, ESA-2026-105, ESA-2026-106 and ESA-2026-110 advisories. - Missing...