ecs-templates

Aperçu Ce dépôt contient tout le nécessaire pour convertir les logs Corelight ou Zeek vers le standard de nommage Elastic Common Schema ECS et les stocker dans un déploiement Elastic Stack. Publié initialement en 2019, la même année que l'Elastic Common Schema, ce dépôt est toujours activement...

ecs-logstash-mappings

Pipeline Logstash ECS Corelight Le dépôt est composé de fichiers de pipeline Logstash à utiliser avec le script d'installation du dépôt https://github.com/corelight/ecs-templates L'installateur de ce dépôt téléchargera les fichiers depuis ce dépôt ; par conséquent, utiliser ce dépôt directement...

ecs-mapping

Pipeline d'ingestion Corelight ECS Le dépôt est composé de fichiers de pipeline d'ingestion nécessaires à l'utilisation avec le script d'installation du dépôt https://github.com/corelight/ecs-templates Le script d'installation de ce dépôt-là téléchargera les fichiers depuis ce dépôt-ci ; par...

content-packs

Packs de contenu pour Eventum Projets de générateurs prêts à l'emploi pour Eventum produisant des événements synthétiques réalistes imitant de véritables sources de données SIEM. Chaque générateur produit du JSON compatible ECS qui peut être ingéré directement dans Elasticsearch, OpenSearch ou...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

cpra

CPRA - Système concurrent de pulsation, remédiation et alerte Surveillez des millions de services en simultané avec une remédiation automatisée et un dimensionnement dynamique des workers. CPRA est un système de surveillance d'infrastructure haute performance conçu pour les équipes de plateforme...

siphondns

SiphonDNS Un PoC pour les techniques décrites dans cette recherche. Implémente l'exfiltration de données via des sections non standard du DNS. Serveur: root@kitploit: $ ./siphondns-server -method ecs Starting DNS server cmd id Command received Receiving...

CVE20264893poc

Topologie : https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Étapes 1.vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces no-resolv no-hosts no-poll cache-size=1000 log-queries log-facility=-...

CVE-2026-19613

The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post...

EUVD-2026-59913

The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post...

CVE-2026-19613

The ECS WordPress plugin before 4.3.10 lacks ownership and post-status checks in its dynamic repeater data source, letting contributor-level accounts read custom field values and metadata from private/draft posts they do not own (CVSS 6.5, MEDIUM). No in-the-wild exploitation or exploit code is d...

CVE-2026-19613

The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post...

CVE-2026-19613 ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source

The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post...

CVE-2026-18807

The ECS WordPress plugin before 4.3.8 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the page builder, allowing users with a contributor-level account or above to read, alter and delete the binding...

CVE-2026-14230

The ECS WordPress plugin before 4.3.8 does not perform capability or object-ownership checks on its Dynamic Repeater AJAX handlers gated only by a capability-agnostic nonce that any editposts user obtains from the Elementor editor, so a Contributor can write a data-source binding into any post —...

CVE-2026-14229

The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when rendering an Elementor document requested through one of its AJAX actions, allowing unauthenticated users to retrieve the rendered content of unpublished private, draft, pending documents by supplying thei...

CVE-2026-18807

The ECS WordPress plugin (versions before 4.3.8) lacks capability and ownership checks on dynamic repeater AJAX handlers, allowing any contributor-level user to read, modify, or delete other users' post binding configurations and alter site-wide presets. Remediation is to upgrade to ECS 4.3.8 or ...

EUVD-2026-59592

The ECS WordPress plugin before 4.3.8 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the page builder, allowing users with a contributor-level account or above to read, alter and delete the binding...

CVE-2026-18807 ECS < 4.3.8 - Contributor+ Arbitrary Post Binding and Global Preset Modification via Dynamic Repeater Handlers

The ECS WordPress plugin before 4.3.8 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the page builder, allowing users with a contributor-level account or above to read, alter and delete the binding...

CVE-2026-14230

In ECS (Ele Custom Skin) plugin for Elementor before 4.3.8, Dynamic Repeater AJAX handlers lack capability and object-ownership checks. A low-privileged Contributor can write unsanitized data-source bindings into any post, including admin pages, causing stored XSS that fires in visitor or admin s...