flashingestor

flashingestor Una TUI para la recolección de Active Directory. Filosofía Los principales objetivos de este proyecto son: 1. Ser un ingestor de datos completo compatible con BloodHound CE Community Edition 2. Ser más rápido, menos ruidoso y más personalizable que otros recolectores 3. Proporcionar...

adexplorersnapshot-rs

ADExplorerSnapshot-rs Rewrite of ADExplorerSnapshot.py. Outputs a .tar.gz of BloodHound CE JSON files for ingestion. Please see the issues with this project before using it. It's not a drop in replacement yet. Installation Pre-built binaries for Linux and Windows are published in releases Usage...

nightHawkResponse

nightHawk Response Aplicación personalizada para la presentación asíncrona de datos forenses sobre un backend Elasticsearch. Esta aplicación está diseñada para ingerir un archivo de "collections" de Mandiant Redline y ofrecer flexibilidad en búsqueda/apilado y etiquetado. La aplicación nació de l...

SUSE CVE-2024-37280

A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of "passthrough" type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

Malcolm

Malcolm Malcolm es un potente conjunto de herramientas de análisis de tráfico de red diseñado con los siguientes objetivos: Fácil de usar – Malcolm acepta datos de tráfico de red en forma de capturas completas de paquetes PCAP, registros de Zeek y alertas de Suricata. Estos artefactos se pueden...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

ShunyaNet-Sentinel

ShunyaNet Sentinel UPDATED: 03/02/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds e.g., breaking news, social media, sends them to an LLM for analysis, and delivers alerts and summary reports directly to the GUI and Slack at regular intervals. The project...

GHSA-9J54-FG26-WV3R vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-FFC3-869F-JXW9 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

CVE-2026-102268 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

CorelightForSecOps

Collect Corelight Sensor logs This document describes how you can collect Corelight Sensor logs by configuring the Corelight Sensor and a Chronicle forwarder. This document also lists the supported log types and supported Corelight versions. For more information, see Data ingestion to Chronicle...