cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

content-packs

Content Packs for Eventum Ready-to-use generator projects for Eventum that produce realistic synthetic events mimicking real SIEM data sources. Each generator outputs ECS-compatible JSON that can be ingested directly into Elasticsearch, OpenSearch, or any SIEM platform. Quick Start With Docker...

ecs-mapping

Corelight ECS Ingest Pipeline The repository is compromised of Ingest Pipeline files required to be used with the installer script in the repository https://github.com/corelight/ecs-templates The installer in that repository will download the files from this repository therefore using this...

cpra

Continuous Pulse and Recovery Agent Checks services, sends alerts, and runs the recovery actions you configure. CPRa is a self-hosted monitoring and recovery agent written in Go. It runs health checks against your services on a schedule, opens and closes incidents against configurable thresholds,...

siphondns

SiphonDNS A PoC for techniques described in this research. Implements data exfiltration via non-standard sections of DNS. Server: $ ./siphondns-server -method ecs Starting DNS server cmd id Command received Receiving data...

CVE20264893poc

Topology: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps​ 1.vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​ no-resolv​ no-hosts​ no-poll​ cache-size=1000​ log-queries​ log-facility=-​...

OPENSUSE-SU-2026:12107-1 amazon-ecs-init-1.108.0-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.108.0-1.1 package on the GA media of openSUSE Tumbleweed...

ecs-mapping

Pipeline di Ingest ECS di Corelight Il repository è composto da file di Ingest Pipeline necessari per l'utilizzo con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates L'installer in quel repository scaricherà i file da questo repository, pertanto...

ecs-logstash-mappings

Corelight ECS Logstash Pipeline Il repository contiene i file di pipeline Logstash necessari per essere utilizzati con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates Lo script di installazione in quel repository scaricherà i file da questo repository...

openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:22035-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22035-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs...

Security update for amazon-ecs-init (important)

openSUSE security update: security update for amazon-ecs-init ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22035-1 Rating: important References: bsc1276744 bsc1279231 bsc1279329 Cross-References: CVE-2026-41178 CVE-2026-84303 CVE-2026-84304 CVSS...

OPENSUSE-SU-2026:22035-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276744. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue...

amazon-ecs-init-1.107.0-1.1 on GA media (moderate)

amazon-ecs-init-1.107.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11914-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-84304 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-84304 SUSE : 7.5...

PT-2026-105623

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: nerdctl, cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, kubevela, chaos-mesh-fips, tracee, docker-compose, harvester-fips, kubevela-fips, consul-k8s, grype-fips, grype, trivy-operator-fips, spegel-fips, rancher-agent, envoy-gateway-fips,...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: nerdctl, cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, kubevela, chaos-mesh-fips, tracee, docker-compose, harvester-fips, kubevela-fips, consul-k8s, grype-fips, grype, trivy-operator-fips, spegel-fips, rancher-agent, envoy-gateway-fips,...

CVE-2026-26947

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-26947

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...