121 matches found
EUVD-2019-13203
Malware in sbrugna...
EUVD-2018-18096
Malware in sbrugna...
EUVD-2020-12713
Malware in sbrugna...
Cyber Warfare during Operation Sindoor: Malware Campaign Analysis and Detection Framework
Rapid digitization of critical infrastructure has made cyberwarfare one of the important dimensions of modern conflicts. Attacking the critical infrastructure is an attractive pre-emptive proposition for adversaries as it can be done remotely without crossing borders. Such attacks disturb the...
EUVD-2022-1220
Malicious code in bioql PyPI...
EUVD-2021-8657
Malicious code in bioql PyPI...
EUVD-2024-20947
Malicious code in bioql PyPI...
CVE-2020-11081
osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables...
CVE-2020-1887
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust...
CVE-2019-3567
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known 'safe' permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permission...
Kibana 7.x < 7.17.22 Multiples Vulnerabilities
According to its self-reported version number, the Kibana application running on the remote host is 7.x prior to 7.17.22 or 8.x prior to 8.14.0. It is, therefore, affected by multiples vulnerabilities. - A high-privileged user, allowed to create custom osquery packs could affect the availability ...
Kibana 8.x < 8.14.0 Multiples Vulnerabilities
According to its self-reported version number, the Kibana application running on the remote host is 7.x prior to 7.17.22 or 8.x prior to 8.14.0. It is, therefore, affected by multiples vulnerabilities. - A high-privileged user, allowed to create custom osquery packs could affect the availability ...
BIT-KIBANA-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...
BIT-ELK-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...
CVE-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...
CVE-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...
CVE-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...
CVE-2024-23443
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...
CVE-2024-23443
Summary (CVE-2024-23443) A high-privileged user who can create custom osquery packs could cause Kibana downtime by uploading a maliciously crafted osquery pack, impacting availability. The issue is described across multiple sources as affecting Kibana (versions around 7.x before 7.17.22 or 8.x be...
PT-2024-19873 · Elastic · Kibana
Name of the Vulnerable Software and Affected Versions: Elastic Kibana affected versions not specified Description: A high-privileged user, allowed to create custom osquery packs, could affect the availability of Kibana by uploading a maliciously crafted osquery pack. Recommendations: At the momen...