SweetSecurity

SweetSecurity Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device. For more information on installation and how Sweet Security works, see the Wiki: https://github.com/TravisFSmith/SweetSecurity/wiki Installation: sudo python setup.py Follow...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

ecs-mapping

Pipeline di Ingest ECS di Corelight Il repository è composto da file di Ingest Pipeline necessari per l'utilizzo con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates L'installer in quel repository scaricherà i file da questo repository, pertanto...

ecs-logstash-mappings

Corelight ECS Logstash Pipeline Il repository contiene i file di pipeline Logstash necessari per essere utilizzati con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates Lo script di installazione in quel repository scaricherà i file da questo repository...

GHSA-H6W7-QMCM-Q6XR vulnerabilities

Vulnerabilities for packages: traccar, thingsboard, logstash, cassandra-reaper, nuxeo, logstash-fips, traccar-fips, conductor-fips, conductor, apache-nifi, druid...

GHSA-CQGH-8P3P-MX4M vulnerabilities

Vulnerabilities for packages: traccar, thingsboard, logstash, cassandra-reaper, nuxeo, logstash-fips, traccar-fips, conductor-fips, conductor, apache-nifi, druid...

GHSA-7822-RCF6-97FX vulnerabilities

Vulnerabilities for packages: traccar, thingsboard, logstash, cassandra-reaper, nuxeo, logstash-fips, traccar-fips, conductor-fips, conductor, apache-nifi, druid...

CVE-2026-106122 vulnerabilities

Vulnerabilities for packages: traccar, thingsboard, logstash, cassandra-reaper, nuxeo, logstash-fips, traccar-fips, conductor-fips, conductor, apache-nifi, druid...

CVE-2026-106121 vulnerabilities

Vulnerabilities for packages: traccar, thingsboard, logstash, cassandra-reaper, nuxeo, logstash-fips, traccar-fips, conductor-fips, conductor, apache-nifi, druid...

CVE-2026-106123 vulnerabilities

Vulnerabilities for packages: traccar, thingsboard, logstash, cassandra-reaper, nuxeo, logstash-fips, traccar-fips, conductor-fips, conductor, apache-nifi, druid...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: cass-config-builder, scala, apicurio-registry, dependency-track, akhq, wildfly, gradle, trino, keycloak-config-cli, tez, keycloak, apache-tika, opensearch, spark, infinispan, flyway, logstash, apache-nifi, apache-nifi-registry, sonarqube, spdx-tools-java,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: cass-config-builder, scala, apicurio-registry, dependency-track, akhq, wildfly, gradle, trino, keycloak-config-cli, tez, keycloak, apache-tika, opensearch, spark, infinispan, flyway, logstash, apache-nifi, apache-nifi-registry, sonarqube, spdx-tools-java,...

Security Bulletin: Due to Logstash, IBM Cloud Pak System is affected by Improper Limitation of a Pathname to a Restricted Directory [CVE-2026-33466]

Summary Vulnerability was found in Logstash shipped with IBM Cloud Pak System. Vulnerability was addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-33466 DESCRIPTION: Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: akhq, celeborn, seata, apache-polaris-fips, s3proxy-fips, jmeter, nacos-docker, apache-pulsar, thingsboard, elasticsearch, elasticsearch-fips, camunda-zeebe, apicurio-registry, opensearch-fips, request-9047-keycloak-fips, solr-fips, spark-fips,...

CVE-2026-77619

A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload...

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2026-77620

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...

CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...

EUVD-2026-84508

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...

CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...