wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

tpotce

T-Pot - オールインワンマルチハニーポットプラットフォーム T-Potは、オプションで分散可能なマルチアーキテクチャ（amd64、arm64）のハニーポットプラットフォームであり、20以上のハニーポットと、Elastic Stackを使用した無数の可視化オプション、アニメーションによるライブ攻撃マップ、欺瞞体験をさらに向上させるための多くのセキュリティツールをサポートしています。 TL;DR 1. システム要件を満たすこと。T-Potのインストールには、少なくとも8～16 GBのRAM、128...

wazuh

Wazuh Wazuhは、脅威の予防、検出、対応に使用される無料のオープンソースプラットフォームです。オンプレミス、仮想化、コンテナ化、クラウドベースの環境にわたるワークロードを保護することができます。 Wazuhソリューションは、監視対象システムに展開されるエンドポイントセキュリティエージェントと、エージェントが収集したデータを収集・分析する管理サーバーで構成されています。さらに、WazuhはElastic Stackと完全に統合されており、ユーザーがセキュリティアラートを閲覧できる検索エンジンとデータ可視化ツールを提供します。 Wazuhの機能...

ecs-templates

概述 本仓库包含将 Corelight 或 Zeek 日志转换为 Elastic Common Schema（ECS）命名标准并将其存储到 Elastic Stack 部署中所需的一切。该仓库最初于 2019 年发布，与 Elastic Common Schema 同年，至今仍在积极维护和更新。 它支持超过 200 种不同的日志和指标，旨在支持所有环境，同时能够自定义所需和期望的选项以适配每个独特的环境。 我们投入了大量精力来确保对所有环境的支持，同时允许自定义必要和期望的选项，以适应每个独特且各自的部署。 该仓库主要由两部分组成： 1. Elasticsearch...

securityonion

Security Onion Security Onion es una distribución de Linux gratuita y de código abierto para la caza de amenazas, la monitorización de seguridad empresarial y la gestión de registros. Incluye un amplio conjunto de herramientas diseñadas para trabajar juntas y proporcionar visibilidad sobre la...

wazuh v5.0.0-beta5

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

PT-2026-33646

Name of the Vulnerable Software and Affected Versions Okta Identity Cloud affected versions not specified Description A critical authentication bypass exists in workforce and customer identity flows. This issue was actively exploited between April 18 and April 19, 2026. Recommendations Patch all...

EUVD-2022-28648

Malicious code in bioql PyPI...

SUSE CVE-2025-24884

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

PT-2025-5591 · Unknown +1 · Kube-Audit-Rest +1

Name of the Vulnerable Software and Affected Versions: kube-audit-rest versions prior to 1.0.16 Description: The issue concerns a simple logger of mutation/creation requests to the k8s API, where the previous values of Kubernetes secrets would have been disclosed in the audit messages if the...

kube-audit-rest 安全漏洞

kube-audit-rest is a Kubernetes audit logging by Richard Tweed Personal Developer. A security vulnerability exists in kube-audit-rest versions prior to 1.0.16, which stems from the fact that previous values of kubernetes secrets are leaked in audit messages if the full-elastic-stack example vecto...

Elastic Kibana Security Vulnerability

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A security vulnerability exists in Elastic Kibana. An attacker could use this vulnerability to affect t...

Buildkite Elastic CI Stack for AWS Security Vulnerability

Buildkite Elastic CI Stack for AWS is an application from Buildkite that provides private, auto-scaling clusters of Buildkite Agents. A security vulnerability exists in Buildkite Elastic CI Stack for AWS versions prior to 6.7.1, and prior to 5.22.5, which stems from the introduction of a TOCTOU...

Elastic Kibana 7.17.4 - 7.17.9, 8.2.0 - 8.6.2 XSS Vulnerability (ESA-2023-06)

Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

SUSE CVE-2022-23711

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide a way to keep a pulse on the health and performance of your Elasticsearch cluster. Authentication with a vulnerable Kibana instance...

Elastic Stack 7.17.4 and 8.2.1 Security Update

Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm ECDSA ESA-2022-06 A vulnerability CVE-2022-21449 affecting the implementation of Elliptic Curve Digital Signing Algorithm ECDSA based signatures verification in Java JDK versions 15 and later...

Information Disclosure

kibana is vulnerable to information disclosure. A remote unauthenticated attacker is able to gain access to unauthorized information via the Elastic Stack monitoring component in the kibana page source. The vulnerability only impacts the users that have set any of the optional...

CVE-2022-23711

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide a way to keep a pulse on the health and performance of your Elasticsearch cluster. Authentication with a vulnerable Kibana instance...

Spoofing

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide a way to keep a pulse on the health and performance of your Elasticsearch cluster. Authentication with a vulnerable Kibana instance...

CVE-2022-23711

A flaw was found in Kibana that could result in an attacker exposing sensitive information related to Elastic Stack monitoring in the Kibana page source, if a user has set the optional monitoring.ui.elasticsearch. settings. This could result in a loss of confidentiality and integrity...