ThreatHunting

ThreatHunting | A Splunk app mapped to MITRE ATT&CK to guide your threat hunts This is a Splunk application containing several dashboards and over 130 reports that will facilitate initial hunting indicators to investigate. You obviously need to be ingesting Sysmon data into Splunk, a good...

elastic-peak-dashboards

PEAK Baseline Threat Hunt Dashboards Kibana / Security Onion 3.0 — Tier 1 & ICS Protocol Analysis Importable Kibana saved-object dashboards implementing the Splunk PEAK Baseline Threat Hunt methodology for cyber threat hunt CTH and incident response IR operations. Built and validated against...

Genzai

Genzai The IoT Security Toolkit Description • Features • Setup & Usage • Acknowledgements • Contact Me Description Genzai helps you identify IoT or Internet of Things related dashboards across a single or set of targets provided as an input and furthermore scan them for default password issues an...

GHSA-J8RW-JP99-435V vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

GHSA-W4XR-HQV8-CH44 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-125333 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-125332 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-125335 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-125334 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

GHSA-6889-VF6X-F3G5 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

GHSA-6CV4-P8M7-4R25 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, dotstatsuite-supercore, jitsucom-jitsu, gitlab-rails-ce, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb, ory-polis-fips, ory-polis, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-64686

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

CVE-2026-64686

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

CVE-2026-64686

OpenSearch Dashboards versions 2.14.0 to before 2.19.6 and 3.0.0 to before 3.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) in the fetchDataSourceMetaData route. The root cause is a missing endpoint validation ; while the test_connection route validates URLs against endpointDeniedIPs ...

CVE-2026-64686: opensearch-project OpenSearch-Dashboards: OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

CorelightForSentinelOne

SentinelOne Dashboards for Singularity Operations Center Overview This guide will help you set up and utilize SentinelOne Dashboards, which offer powerful data insights for monitoring and analyzing your network traffic. Whether you're a security analyst, network administrator, or IT professional,...

CVE-2026-118267

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Incorrect Authorization leading to Privilege Escalation in all versions up to, and including, 5.5.89 This is due to the plugin's write endpoints wpda/app/update, wpda/app/delete,...

EUVD-2026-119157

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Incorrect Authorization leading to Privilege Escalation in all versions up to, and including, 5.5.89 This is due to the plugin's write endpoints wpda/app/update, wpda/app/delete,...

CVE-2026-121536

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to generic SQL Injection via the 'engine' parameter in all versions up to, and including, 5.5.90 due to insufficient escaping on the user supplied parameter and lack of sufficient...