557 matches found
ecs-logstash-mappings
Corelight ECS Logstash 管道 本仓库包含 Logstash 管道文件，需配合以下仓库中的安装脚本使用： https://github.com/corelight/ecs-templates 该仓库中的安装脚本将从本仓库下载文件，因此无需也不建议直接使用本仓库。 许可证 这些文件和自动化脚本均以 BSD 许可证开源。详细信息请参阅 COPYING。 Github 仓库定义 Elasticsearch 模板 https://github.com/corelight/ecs-templates Elasticsearch 索引模板、组件模板、ILM 策略、设置和映射 安装...
ecs-mapping
Corelight ECS 摄取管道 本仓库由摄取管道文件组成，这些文件需与以下仓库中的安装脚本配合使用 https://github.com/corelight/ecs-templates 该仓库中的安装脚本会从此仓库下载文件，因此无需也不建议直接使用本仓库。 许可证 这些文件和自动化脚本均以 BSD 许可证开源。详见 COPYING。 GitHub 仓库说明 Elasticsearch 模板 https://github.com/corelight/ecs-templates Elasticsearch 索引模板、组件模板、ILM 策略、设置和映射 安装脚本 Logstash 管道...
SweetSecurity
SweetSecurity Bro IDS、Elasticsearch、Logstash、Kibana、Critical Stackを任意のデバイスにセットアップおよびインストールするためのスクリプト。 インストール方法とSweet Securityの動作詳細については、Wikiを参照してください： https://github.com/TravisFSmith/SweetSecurity/wiki インストール： sudo python setup.py プロンプトに従い、選択したインストールタイプに適した情報を入力 新機能： モジュール化インストール -...
GHSA-642R-3GJ9-2PJ5 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak, apache-nifi, wildfly, cass-config-builder, strimzi-kafka-operator, trino, sonarqube, scala, spdx-tools-java, infinispan, druid, apache-nifi-registry, apache-tika, spark, tez, apicurio-registry, gradle, opensearch, flyway, akhq,...
CVE-2026-68494 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak, apache-nifi, wildfly, cass-config-builder, strimzi-kafka-operator, trino, sonarqube, scala, spdx-tools-java, infinispan, druid, apache-nifi-registry, apache-tika, spark, tez, apicurio-registry, gradle, opensearch, flyway, akhq,...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
GHSA-GX83-3VF8-GH7J vulnerabilities
Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...
CVE-2026-77619
A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload...
CVE-2026-77619
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...
CVE-2026-77620
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...
CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...
CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...
CVE-2026-77620 Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...
CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...
CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...
CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...
CVE-2026-77619
CVE-2026-77619 affects the logstash source in Vector (versions 0.15.0 through 0.57.0). The vulnerability stems from the source reading a 32-bit compressed-frame length from the network and sizing an in-memory buffer without an upper bound . An unauthenticated remote peer reaching the default 0.0....
CVE-2026-77620: Improper Handling of Highly Compressed Data (Data Amplification)
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send many nest...
CVE-2026-77619: Improper Handling of Length Parameter Inconsistency
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...