opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

nightingale

オープンソースのアラート専門家 English | 中文 🎯 Nightingale とは Nightingale は、アラートに焦点を当てたオープンソースの監視プロジェクトです。Grafana と同様に、Nightingale も既存のさまざまなデータソースに接続できます。ただし、Grafana が可視化を重視するのに対し、Nightingale はアラートエンジンと、アラームの処理および配信をより重視しています。 💡 Nightingale は今、標準で MCP に対応しています。サーバー自体が組み込みの MCP エンドポイントを /mcp に公開するため、AI...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

CVE-2026-105113

The Nezha Dashboard (versions 1.8.0 before 2.3.13) is vulnerable to an improper locking issue (CWE-667). The root cause is a non-deferred mutex unlock that leaks during a nil-map panic path . An authenticated non-admin member can trigger this by making four specific notification API calls, result...

EUVD-2026-92016

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alerting subsystem. Attackers can concurrently call the notification-group and batch-delete endpoints with oversized id lists to widen the race a...

CVE-2026-105112

The Nezha monitoring agent, versions 1.8.0 before 2.3.13 , is vulnerable to a lock-order inversion within the UpdateGroup and DeleteGroup functions. This flaw allows authenticated non-admin users to trigger a deadlock in the alerting subsystem . By concurrently calling the notification-group and ...

log4j-honeypot-flask

log4j-honeypot-flask 内部ネットワーク用ハニーポット。攻撃者や内部関係者が log4j CVE-2021-44228 を利用してネットワークをスキャンしているかどうかを検出します。 これは、ワークステーションまたはサーバーにインストールして使用できます。Python スクリプト app/app.py を直接実行する方法（python3、Flask、Requests が必要）か、Docker コンテナとして実行する方法があります。 いくつかの環境変数を設定する必要があります（またはスクリプトに直接ハードコードすることもできます）: WEBHOOKURL=通知を受け取る...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

netsentryx

NetSentryx PRO 🛡️ AI駆動、高性能リアルタイムネットワーク可観測性 & 脅威検知エンジン NetSentryx PROは、次世代のイベント駆動型ネットワーク監視および脅威インテリジェンスプラットフォームです。ルールベースのシグネチャとPyTorchディープオートエンコーダを組み合わせることで、10ms未満のパケットおよびネットフロー異常検知、自動マルチチャネルアラート（Slack、Discord、Email）、そしてインタラクティブなリアルタイムSOCダッシュボードを提供します。 🏗️ システムアーキテクチャ...

reactor

Reactor Reactor は、オープンソースプロジェクト ElastAlert のフォークとして始まりました。このプロジェクトのメンテナーは、ElastAlert の変更（追加のアラート機能を除く）を注意深く追跡し、関連するバグ修正がパッチとして適用され、有用な機能が移植されるようにする必要があります。 Reactor は、カスタムフィルターを持つ一連のルールを受け取り、一致したアラートを通知するアラートエンジンです。Reactor は、抑制されたアラートを繰り返しアラート情報で自動的に更新します。 ElastAlert からのパッチ履歴 アクセス日| コミット| 備考...

netsentryx — Updated!

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

krane v0.1.6

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

SUSE SLES15 Security Update : grafana (SUSE-SU-2026:3718-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3718-1 advisory. grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: - CVE-2026-39882: Prevent memory exhaustion DoS in...

Security update for grafana

This update for grafana fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters bsc1274217 CVE-2026-33382: Limit the size of the request body before processing...

Security update for Multi-Linux Manager Client Tools - Monitoring stack

This update fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints bsc1271331 - version 12.4.4 CVE-2025-12141: Fixed information leakage...

Grafana Alerting: Datasource query authorization bypass via spoofed queryType

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana’s configured...

Kibana 8.x < 8.19.20 / 9.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-92 / ESA-2026-98 / ESA-2026-100 / ESA-2026-104 / ESA-2026-105 / ESA-2026-106 / ESA-2026-110)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-92, ESA-2026-98, ESA-2026-100, ESA-2026-104, ESA-2026-105, ESA-2026-106 and ESA-2026-110 advisories. - Missing...