913 matches found
pySigma-backend-opensearch
pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...
SecurityClaw
SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...
Malcolm
Malcolm Malcolm 是一套强大的网络流量分析工具套件,其设计目标如下: 易于使用 – Malcolm 接受全流量数据包捕获(PCAP)文件、Zeek 日志和 Suricata 告警等形式的数据。这些内容可通过简单的浏览器界面上传,或使用轻量级转发器进行被动实时捕获并转发至 Malcolm。无论采用哪种方式,数据都会被自动归一化、丰富化并关联以进行分析。 强大的流量分析能力 – 通过两个直观界面提供网络通信可见性:OpenSearch Dashboards(一个灵活的数据可视化插件,内置数十个预建仪表板,可概览网络协议)和...
CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS
CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...
CVE-Wazuh
Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...
CVE-2026-67321 vulnerabilities
Vulnerabilities for packages: langfuse, prism, opensearch-dashboards, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, lerna...
GHSA-3MCP-22MF-VRW3 vulnerabilities
Vulnerabilities for packages: langfuse, prism, opensearch-dashboards, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, lerna...
Sentora
Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...
CVE-2026-84942
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
CVE-2026-84942
This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...
CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
EUVD-2026-74074
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
PT-2026-88317
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
GHSA-JQFF-G426-HQXP vulnerabilities
Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, gitlab-rails-ce, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy,...
GHSA-FPH4-WMHF-6FWF vulnerabilities
Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy, wazuh-dashboard,...
GHSA-F65P-4M7J-42XC vulnerabilities
Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, gitlab-rails-ce, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, tensorflow-gpu-jupyter, yaml-language-server, unleash-proxy,...
GHSA-5JGF-P345-68V8 vulnerabilities
Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, keep, vitess, langfuse, tileserver-gl, opensearch-dashboards, langfuse-fips, prism, wazuh-dashboard-fips, keep-fips, nextcloud-server, unleash-fips, yaml-language-server, unleash-proxy, wazuh-dashboard, gitlab-rails-ce-fips,...
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, langfuse, gitlab-rails-ce, tileserver-gl, json-server, opensearch-dashboards, langfuse-fips, azurite, prism, arangodb, wazuh-dashboard-fips, code-server, kubeflow-centraldashboard, redisinsight, renovate, sqlpad, unleash-fips,...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: kibana, tileserver-gl-fips, unleash, langfuse, gitlab-rails-ce, tileserver-gl, json-server, opensearch-dashboards, langfuse-fips, azurite, prism, arangodb, wazuh-dashboard-fips, code-server, kubeflow-centraldashboard, redisinsight, renovate, sqlpad, unleash-fips,...