SecurityClaw

SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...

Malcolm

Malcolm Malcolm은 다음과 같은 목표를 염두에 두고 설계된 강력한 네트워크 트래픽 분석 도구 모음입니다: 사용하기 쉬움 – Malcolm은 전체 패킷 캡처PCAP 파일, Zeek 로그, Suricata 알림 형태의 네트워크 트래픽 데이터를 수용합니다. 이러한 아티팩트는 간단한 브라우저 기반 인터페이스를 통해 업로드하거나 경량 포워더를 사용하여 수동적으로 캡처하여 Malcolm으로 전달할 수 있습니다. 두 경우 모두 데이터는 자동으로 정규화, 강화 및 상관 분석됩니다. 강력한 트래픽 분석 – 네트워크 통신에 대한 가시...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTMLインジェクション + 保存型XSS Opensearch のプラグイン「reports」が、バージョン 2.18.0 で HTML インジェクションに対して脆弱であることが判明しました。 レポート機能により、ユーザーは新しいレポート定義を作成する際に、ヘッダーとフッターに HTML を保存できました。 以下は、ヘッダー機能に iframe を保存し、ローカルマシンからユーザーが入力したキーを記録する JavaScript キーロガーを取得させた、簡単な概念実証です。 PoC 1. keylogger.html...

pySigma-backend-opensearch

pySigma OpenSearch 백엔드 이것은 pySigma용 OpenSearch 백엔드입니다. sigma.backends.opensearch 패키지에 두 가지 백엔드 클래스를 제공합니다: OpensearchLuceneBackend - Sigma 규칙을 Lucene 쿼리 구문으로 변환합니다. OpenSearchPPLBackend - Sigma 규칙을 PPLPiped Processing Language 쿼리로 변환합니다. Lucene 백엔드 Lucene 백엔드는 다음 출력 형식을 지원합니다: default: Lucene 구문의...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, langfuse, opensearch-dashboards-fips, langfuse-fips, kibana...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, langfuse, opensearch-dashboards-fips, langfuse-fips, kibana...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, awx, opensearch-dashboards, gitlab-rails-ce-fips, librechat, langfuse, opensearch-dashboards-fips, langfuse-fips, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kibana...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: nextcloud-server, awx, opensearch-dashboards, gitlab-rails-ce-fips, librechat, langfuse, opensearch-dashboards-fips, langfuse-fips, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kibana...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, nextcloud-server...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, nextcloud-server...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: scala, apache-tika, druid, sonarqube, keycloak-config-cli, apicurio-registry, flyway, infinispan, dependency-track, apache-nifi, wildfly, spdx-tools-java, keycloak, apache-nifi-registry, spark, opensearch, akhq, logstash, trino, gradle, strimzi-kafka-operator, tez,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: scala, apache-tika, druid, sonarqube, keycloak-config-cli, apicurio-registry, flyway, infinispan, dependency-track, apache-nifi, wildfly, spdx-tools-java, keycloak, apache-nifi-registry, spark, opensearch, akhq, logstash, trino, gradle, strimzi-kafka-operator, tez,...

CVE-Wazuh

Wazuh Manager — inventorysync에서 에이전트가 제어하는 DataValue.index를 통한 NDJSON 인젝션 - 초안 등록된 에이전트는 DataValue.index를 통해 임의의 OpenSearch bulk 작업을 은밀히 주입할 수 있습니다. GHSA-ff9g-85jq-r3g3 ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 예제 설정: git clone cd Project use pyth...

CVE-2026-101899 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, gitlab-rails-ce-fips, librechat, redisinsight, langfuse, lerna, langfuse-fips, opensearch-dashboards-fips, lambda-nodejs, semaphore, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kib...

CVE-2026-101907 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, gitlab-rails-ce-fips, librechat, redisinsight, langfuse, lerna, langfuse-fips, opensearch-dashboards-fips, lambda-nodejs, semaphore, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kib...

CVE-2026-101909 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, azurite, librechat, redisinsight, langfuse, opensearch-dashboards-fips, langfuse-fips, semaphore, lambda-nodejs, wazuh-dashboard-fips, wazuh-dashboard, lerna, kibana...

GHSA-C29M-XWM3-CM6R vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, gitlab-rails-ce-fips, librechat, redisinsight, langfuse, lerna, langfuse-fips, opensearch-dashboards-fips, lambda-nodejs, semaphore, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kib...

GHSA-X97P-JQ2G-JP4F vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, azurite, librechat, redisinsight, langfuse, opensearch-dashboards-fips, langfuse-fips, semaphore, lambda-nodejs, wazuh-dashboard-fips, wazuh-dashboard, lerna, kibana...

GHSA-44G4-M2MJ-WPVX vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, gitlab-rails-ce-fips, librechat, redisinsight, langfuse, lerna, langfuse-fips, opensearch-dashboards-fips, lambda-nodejs, semaphore, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kib...

GHSA-4HQW-QXG8-JXX2 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, opensearch-dashboards, gitlab-rails-ce-fips, librechat, redisinsight, langfuse, lerna, langfuse-fips, opensearch-dashboards-fips, lambda-nodejs, semaphore, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, kib...