1326 matches found
SecurityClaw
SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...
CVE-2026-111767 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-22JM-H49P-29QW vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-111771 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-6PRH-2H8M-C8CW vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-111768 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-111769 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-RVQ5-WWQV-78PQ vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-46JR-4WX8-V453 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, opensearch-dashboards-fips, opensearch-dashboards...
CVE-Wazuh
Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...
Sentora
Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...
CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS
CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...
pySigma-backend-opensearch
pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...
CVE-2026-111906
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...
CVE-2026-111906 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...
EUVD-2026-103314
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...
CVE-2026-111906 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...
CVE-2026-111906
phpMyFAQ versions prior to 4.1.9 and 4.2.0-alpha before 4.2.0-beta are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the Elasticsearch and OpenSearch administration API endpoints because they fail to validate CSRF tokens for create , drop , and import actions...
