Cortex

Cortex intenta resolver un problema común que enfrentan con frecuencia los SOC, CSIRT e investigadores de seguridad durante la inteligencia de amenazas, la informática forense digital y la respuesta a incidentes: ¿cómo analizar observables que han recopilado, a gran escala , consultando una sola...

CVE-2026-78584

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

EUVD-2026-70063

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

EUVD-2026-70005

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0...

Kibana 9.4.4 Security Update (ESA-2026-161)

Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges...

CVE-2021-45901

CVE-2021-45901 ServiceNow - 用户名枚举 PoC 代码 enumSNOWUsers.py - SNOW 用户枚举器 标题 ServiceNow 应用程序中发现的用户名枚举漏洞 发布：版本 1.0 厂商：ServiceNow 产品：ServiceNow https://www.servicenow.com/ 受影响版本：Orlando glide-orlando-12-11-2019patch5-06-17-2020 产品描述： ServiceNow 是一家美国软件公司，总部位于加利福尼亚州圣克拉拉，开发云计算平台，帮助企业管理企业运营的数字工作流。 参考...

Chromium: CVE-2026-79181 Observable discrepancy in Glic

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79028 Observable discrepancy in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79016 Observable discrepancy in SVG

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78955 Observable discrepancy in PerformanceAPIs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79242 Observable discrepancy in HTML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79287 Observable discrepancy in Forms

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79030 Observable discrepancy in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2025-68621

CVE-2025-68621 — Timing-Angriff auf /api/login/sync in Trilium Notes Schweregrad: HIGH CVSS 7.4 Betroffene Software: TriliumNext/Trilium 0.101.0 Schwachstellentyp: CWE-208 – Beobachtbare Timing-Diskrepanz Observable Timing Discrepancy Behoben in: Trilium 0.101.0 PR 8129 Veröffentlicht: 2026-02-06...

CVE-2026-11754

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

EUVD-2026-67135

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-11754 User Enumeration in Seres Software's syWEB

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-11754

An observable discrepancy vulnerability in Seres Software syWEB (affecting versions through 27082026) allows Account Footprinting , also described as User Enumeration . The CVSS 3.1 score is 5.3 (MEDIUM) with a network attack vector, low complexity, no required privileges, no user interaction, an...