101 matches found
osquery_cve-2024-23443
Prova di concetto POC CVE-2024-23443 hpbiososquery Aggiungi l'estensione osquery HP BIOS WMI ad Elastic Agent Dipendenze pip install pywin32 pip install osquery pip install pyinstaller Compilazione root@kitploit: pyinstaller --onefile hpbiosenumeration.py Installazione 1. Copia l'estensione nella...
agent-skills
Elastic Agent Skills Elastic Agent Skills — realizzate da chi ha creato Elastic — portano l'esperienza diretta della piattaforma direttamente al tuo agente AI di codifica. Questa è la libreria ufficiale delle Skills per agenti, compatibile con IDE agentici come Cursor, GitHub Copilot, Windsurf,...
GO-2026-5343 vulnerabilities
Vulnerabilities for packages: elastic-agent, elastic-agent-fips...
GO-2026-5544 vulnerabilities
Vulnerabilities for packages: elastic-agent, elastic-agent-fips...
GO-2026-5932 vulnerabilities
Vulnerabilities for packages: terrafmt-fips, elastic-agent, terrafmt, elastic-agent-fips...
GO-2026-4923 vulnerabilities
Vulnerabilities for packages: frankenphp-8.2, cloudbeat-fips, rke2-runtime-fips, datadog-agent-fips, datadog-agent, elastic-agent-fips, rke2-runtime, consul, zot, commercial-grafana, elastic-agent, beats-fips, containerd, mattermost, vault-fips, frankenphp-8.5, k3s, cloudbeat, vault, consul-fips,...
GO-2025-4252 vulnerabilities
Vulnerabilities for packages: apm-server-fips, elastic-agent, cloudbeat, beats-fips, cloudbeat-fips, apm-server...
GO-2023-2413 vulnerabilities
Vulnerabilities for packages: apm-server-fips, elastic-agent-fips, elastic-agent, cloudbeat, cloudbeat-fips, apm-server...
GO-2025-4253 vulnerabilities
Vulnerabilities for packages: apm-server-fips, elastic-agent-fips, elastic-agent, cloudbeat, cloudbeat-fips, apm-server...
GO-2025-4173 vulnerabilities
Vulnerabilities for packages: falcosidekick, elastic-agent-fips, falcosidekick-fips, minio, agentbeat-fips, agentbeat, elastic-agent, dapr-fips, zabbix-agent2-fips, zabbix-agent2, beats-fips, minio-fips, telegraf, beats, dapr, influxd, bento...
CVE-2026-72631
Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...
EUVD-2026-58220
Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...
CVE-2026-72631 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys
Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...
CVE-2026-72631
Kibana Fleet vulnerability CVE-2026-72631: Improper Privilege Management can allow an Elastic Agent API key issued to agents in a policy to gain additional write rights (insert new documents and extend index mappings) for certain indices by including extra data streams in the integration policy. ...
CVE-2026-72666
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...
Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-128)
Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys Description: Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: k3d, minio, nerdctl, cert-manager, flux, omnictl-multiarch-fips, telegraf, aactl, prometheus-mongodb-exporter, spire-server, elastic-agent-fips, zot, cilium, containerd, prometheus, reports-server, snyk-cli, k3s, prometheus-operator, kots, omnictl-multiarch, terrafor...
CVE-2026-42602 vulnerabilities
Vulnerabilities for packages: elastic-agent, elastic-agent-fips...