481 matches found
SweetSecurity
SweetSecurity Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device. For more information on installation and how Sweet Security works, see the Wiki: https://github.com/TravisFSmith/SweetSecurity/wiki Installation: sudo python setup.py Follow...
ecs-logstash-mappings
Pipeline de Logstash para Corelight ECS El repositorio se compone de archivos de pipeline de Logstash necesarios para usarse con el script de instalación del repositorio https://github.com/corelight/ecs-templates El instalador de ese repositorio descargará los archivos de este repositorio, por lo...
ecs-mapping
Canal de ingesta ECS de Corelight El repositorio está compuesto por archivos de canal de ingesta Ingest Pipeline necesarios para usarse con el script de instalación del repositorio https://github.com/corelight/ecs-templates El instalador en ese repositorio descargará los archivos de este...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
CLEANSTART-2026-GB90768 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Multiple security vulnerabilities affect the logstash-exporter package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
CLEANSTART-2026-AJ83096 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Multiple security vulnerabilities affect the logstash-exporter package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
GHSA-C4C3-7FPV-J4Q5 vulnerabilities
Vulnerabilities for packages: zookeeper, flyway-fips, request-9047-keycloak-fips, kayenta-fips, pinot-fips, sonarqube, elasticsearch, cassandra, floci, hono, apache-nifi, spark-fips, keycloak, cruise-control-fips, drain-cleaner, hadoop-fips, druid, cruise-control,...
CVE-2026-75595 vulnerabilities
Vulnerabilities for packages: zookeeper, flyway-fips, request-9047-keycloak-fips, kayenta-fips, pinot-fips, sonarqube, elasticsearch, cassandra, floci, hono, apache-nifi, spark-fips, keycloak, cruise-control-fips, drain-cleaner, hadoop-fips, druid, cruise-control,...
GHSA-6QM2-MCQ7-53QP vulnerabilities
Vulnerabilities for packages: nacos-docker, kayenta-fips, sonarqube, airflow, apicurio-registry, hadoop-client-modules, kafbat-ui-fips, py3-vllm-cuda-12.4, jenkins-plugin-manager, ruby4.0-jrjackson, apache-pulsar-fips, spdx-tools-java, hadoop-fips, druid, cassandra-fips, wso2is, elasticsearch-fip...
cve-2026-47859 - MEDIUM - Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS
cve-2026-47859 - MEDIUM - Unbounded memory allocation in RFC6587SyslogDeserializer octet-counted framing — remote DoS...
CVE-2026-19671
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...
EUVD-2026-61160
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: restic, k3s, yunikorn-web, buf, glab, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: restic, k3s, yunikorn-web, buf, glab, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...
CVE-2026-56862 vulnerabilities
Vulnerabilities for packages: restic, k3s, yunikorn-web, buf, glab, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: restic, k3s, yunikorn-web, buf, glab, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: restic, k3s, buf, glab, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib, cloud-sql-proxy, migrate...
GO-2026-6218 vulnerabilities
Vulnerabilities for packages: restic, k3s, buf, glab, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib, cloud-sql-proxy, migrate...