19 matches found
[SECURITY] Fedora 42 Update: rust-crypto-auditing-agent-0.2.3-6.fc42
Event collector agent for crypto-auditing project...
[SECURITY] Fedora 43 Update: rust-crypto-auditing-agent-0.2.4-3.fc43
Event collector agent for crypto-auditing project...
CVE-2021-47861
CVE-2021-47861 : Event Log Explorer 4.9.3 is affected by an unquoted service path that enables local users to potentially execute arbitrary code with elevated (LocalSystem) privileges during service startup via mislocated executables. Under the documented exploit path, attackers place a malicious...
EUVD-2002-1264
Malware in sbrugna...
[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-3.fc41
Event collector agent for crypto-auditing project...
[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-2.fc41
Event collector agent for crypto-auditing project...
CVE-2022-43572
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...
CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...
PT-2022-26975 · Splunk · Splunk Enterprise
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.2.9 Splunk Enterprise versions prior to 8.1.12 Splunk Enterprise versions prior to 9.0.2 Description: The issue occurs when a malformed file is sent through the Splunk-to-Splunk S2S or HTTP Event Collecto...
Elodea Event Collector 4.9.3 - (ElodeaEventCollectorService) Unquoted Service Path Vulnerability
Exploit Title: Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path Discovery by: Alan Mondragon Vendor Homepage: https://eventlogxp.com/ Software Links : https://eventlogxp.com/ Tested Version: Version: 4.9.3 Vulnerability Type: Unquoted Service Path Tested on OS:...
Elodea Event Collector 4.9.3 Unquoted Service Path
Exploit Title: Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path Discovery by: Alan Mondragon Discovery Date: 2021-03-23 Vendor Homepage: https://eventlogxp.com/ Software Links : https://eventlogxp.com/ Tested Version: Version: 4.9.3 Vulnerability Type: Unquoted...
Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
Exploit Title: Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path Discovery by: Alan Mondragon Discovery Date: 2021-03-23 Vendor Homepage: https://eventlogxp.com/ Software Links : https://eventlogxp.com/ Tested Version: Version: 4.9.3 Vulnerability Type: Unquoted...
The first Zbrunk dashboard and other news
The long New Year holiday season in Russia was not in vain. I had time to work on Zbrunk. As you can see, I made my first dashboard and added other features. No more timestamps in code I added functions to get Unix timestamps from lines in human-readable time format, e.g. "2019.12.10 13:00:00"...
Sending tables from Atlassian Confluence to Splunk
Sometimes when we make automated analysis with Splunk, it might be necessary to use information that was entered or edited manually. For example, the classification of network hosts: do they belong to the PCI-DSS Scope or another group critical hosts or not. In this case, Confluence can be quite ...
How to correlate different events in Splunk and make dashboards
Recently I've spent some time dealing with Splunk. Despite the fact that I have already done various Splunk searches before, for example in "Tracking software versions using Nessus and Splunk", the correlation of different events in Splunk seems to be a very different task. And there not so many...
Microsoft Windows: Service: Windows Event Collector
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wineventcollector.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Windows Event Collector Wecsvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
CVE-2002-1280
Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service memory consumption and crash...
CVE-2002-1280
The vulnerability CVE-2002-1280 affects RealSecure Event Collector 6.5. A memory leak is described as causing a denial of service through memory consumption and eventual crash. The existing references (CVE records and NVD entry) confirm the issue and its impact but do not provide specific exploit...
CVE-2002-1280
Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service memory consumption and crash...