pySigma-backend-opensearch

pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...

SecurityClaw

SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...

Malcolm

Malcolm Malcolm 是一套强大的网络流量分析工具套件，其设计目标如下： 易于使用 – Malcolm 接受全流量数据包捕获（PCAP）文件、Zeek 日志和 Suricata 告警等形式的数据。这些内容可通过简单的浏览器界面上传，或使用轻量级转发器进行被动实时捕获并转发至 Malcolm。无论采用哪种方式，数据都会被自动归一化、丰富化并关联以进行分析。 强大的流量分析能力 – 通过两个直观界面提供网络通信可见性：OpenSearch Dashboards（一个灵活的数据可视化插件，内置数十个预建仪表板，可概览网络协议）和...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

CVE-Wazuh

Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: langfuse, prism, opensearch-dashboards, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, lerna...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: langfuse, prism, opensearch-dashboards, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, lerna...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

PT-2026-88317

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, gitlab-rails-ce, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy,...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy, wazuh-dashboard,...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, gitlab-rails-ce, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy,...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, yaml-language-server, unleash-proxy, wazuh-dashboard, gitlab-rails-ce-fips,...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, langfuse, gitlab-rails-ce, tileserver-gl, json-server, opensearch-dashboards, langfuse-fips, azurite, prism, arangodb, wazuh-dashboard-fips, code-server, kubeflow-centraldashboard, redisinsight, renovate, sqlpad, unleash-fips,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, langfuse, gitlab-rails-ce, tileserver-gl, json-server, opensearch-dashboards, langfuse-fips, azurite, prism, arangodb, wazuh-dashboard-fips, code-server, kubeflow-centraldashboard, redisinsight, renovate, sqlpad, unleash-fips,...