3751 matches found
agent-skills
Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...
drovorub-hunt
Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...
Adaz
Adaz: Active Directory Hunting Lab in Azure This project allows you to easily spin up Active Directory labs in Azure with domain-joined workstations, Windows Event Forwarding, Kibana, and Sysmon using Terraform/Ansible. It exposes a high-level configuration file for your domain to allow you to...
SweetSecurity
SweetSecurity Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device. For more information on installation and how Sweet Security works, see the Wiki: https://github.com/TravisFSmith/SweetSecurity/wiki Installation: sudo python setup.py Follow...
CVE-2026-115293
Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...
CVE-2026-115292
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana Machine Learning can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with Machine Learning read access in one Kibana space can read the audit and error...
CVE-2026-115295
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...
CVE-2026-115294
Improper Limitation of a Pathname to a Restricted Directory CWE-22 in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal CAPEC-126. A low-privileged user with Fleet agent policies write access could cause a subsequent administrative action to act on unintended...
CVE-2026-115295 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...
EUVD-2026-116076
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...
CVE-2026-115295
Kibana is vulnerable to an Authorization Bypass Through User-Controlled Key (CWE-639), which can lead to information disclosure. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information from other spaces they are not authorized to a...
CVE-2026-115295 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...
EUVD-2026-116075
Improper Limitation of a Pathname to a Restricted Directory CWE-22 in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal CAPEC-126. A low-privileged user with Fleet agent policies write access could cause a subsequent administrative action to act on unintended...
CVE-2026-115294 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
Improper Limitation of a Pathname to a Restricted Directory CWE-22 in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal CAPEC-126. A low-privileged user with Fleet agent policies write access could cause a subsequent administrative action to act on unintended...
CVE-2026-115294 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
Improper Limitation of a Pathname to a Restricted Directory CWE-22 in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal CAPEC-126. A low-privileged user with Fleet agent policies write access could cause a subsequent administrative action to act on unintended...
CVE-2026-115294
Kibana versions 9.3.0 through 9.4.8 and 9.5.0 through 9.5.5 are vulnerable to a Path Traversal (CWE-22) flaw in the Fleet feature . A low-privileged user with Fleet agent policies write access can manipulate paths to cause an administrator to inadvertently delete unauthorized resources, such as K...
CVE-2026-115293 Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure
Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...
EUVD-2026-116074
Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...
CVE-2026-115293
Kibana versions 8.10.0–8.19.23 and 9.0.0–9.4.8 / 9.5.0–9.5.5 are vulnerable to CWE-201 (Insertion of Sensitive Information Into Sent Data). In self-managed deployments where credentials are embedded directly in the Elasticsearch host URLs of the Kibana configuration, an authenticated user with pe...
CVE-2026-115293 Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure
Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...