pySigma-backend-opensearch

pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...

Malcolm

Malcolm Malcolm es un potente conjunto de herramientas de análisis de tráfico de red diseñado con los siguientes objetivos: Fácil de usar – Malcolm acepta datos de tráfico de red en forma de capturas completas de paquetes PCAP, registros de Zeek y alertas de Suricata. Estos artefactos se pueden...

SecurityClaw

SecurityClaw — Framework Agente Autónomo de SOC Un agente autónomo modular y basado en habilidades del Centro de Operaciones de Seguridad SOC que monitorea datos de OpenSearch/Elasticsearch, construye memoria conductual basada en RAG y valida anomalías en tiempo real usando LLMs. Funcionalidades...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-Inyección de HTML + XSS Almacenado Se descubrió que el plugin de Opensearch llamado "reports" era vulnerable a la inyección de HTML en la versión 2.18.0. La funcionalidad de informes permitía a los usuarios almacenar HTML en el encabezado y pie de página al crear una nue...

CVE-Wazuh

Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: langfuse, prism, opensearch-dashboards, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, lerna...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: langfuse, prism, opensearch-dashboards, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, lerna...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

PT-2026-88317

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, gitlab-rails-ce, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy,...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy, wazuh-dashboard,...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, gitlab-rails-ce, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy,...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, yaml-language-server, unleash-proxy, wazuh-dashboard, gitlab-rails-ce-fips,...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, langfuse, gitlab-rails-ce, tileserver-gl, json-server, opensearch-dashboards, langfuse-fips, azurite, prism, arangodb, wazuh-dashboard-fips, code-server, kubeflow-centraldashboard, redisinsight, renovate, sqlpad, unleash-fips,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, langfuse, gitlab-rails-ce, tileserver-gl, json-server, opensearch-dashboards, langfuse-fips, azurite, prism, arangodb, wazuh-dashboard-fips, code-server, kubeflow-centraldashboard, redisinsight, renovate, sqlpad, unleash-fips,...