ossec-hids

OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...

ossec-hids

OSSEC 정보 OSSEC는 시스템을 모니터링하고 제어하기 위한 완전한 플랫폼입니다. HIDS호스트 기반 침입 탐지, 로그 모니터링, SIM/SIEM의 모든 측면을 단순하고 강력하며 오픈 소스인 하나의 솔루션으로 결합합니다. 최신 정보는 저희 웹사이트를 방문하세요. www.ossec.net 현재 릴리스 현재 안정 버전은 ossec 웹사이트에서 확인할 수 있습니다. 릴리스 다운로드: Downloads 릴리스 문서: docs 개발 개발 버전은 GitHub에서 호스팅되며 간단한 git clone만으로 받을 수 있습니다. 스크린샷 파...

EUVD-2020-29314

Malware in sbrugna...

EUVD-2020-29308

Malware in sbrugna...

EUVD-2020-29313

Malware in sbrugna...

EUVD-2020-29309

Malware in sbrugna...

EUVD-2020-29310

Malware in sbrugna...

EUVD-2020-29312

Malware in sbrugna...

EUVD-2020-29311

Malware in sbrugna...

EUVD-2024-17009

Malicious code in bioql PyPI...

CVE-2024-1244

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2024-1244

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2024-1244

OSSEC HIDS agent for Windows prior to 3.8.0 is affected by improper input validation that allows an attacker with control over the OSSEC server or the agent’s key to configure the agent to connect to a malicious UNC path. This can leak the machine account NetNTLMv2 hash, which could be relayed fo...

CVE-2024-1244 Remote code execution and local privilege escalation due to UNC access and NetNTLMv2 hash theft

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2024-1244 Remote code execution and local privilege escalation due to UNC access and NetNTLMv2 hash theft

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2024-1244

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

PT-2025-25178 · Ossec · Ossec Hids Agent For Windows

Name of the Vulnerable Software and Affected Versions: OSSEC HIDS agent for Windows versions prior to 3.8.0 Description: The issue is related to improper input validation, allowing an attacker with control over the OSSEC server or in possession of the agent's key to configure the agent to connect...

CVE-2024-1244: External Control of File Name or Path

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2020-8446

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to path traversal with write access via crafted syscheck messages written directly to the analysisd UNIX domain socket by a local user...

CVE-2020-8442

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a heap-based buffer overflow in the rootcheck decoder component via an authenticated client...