OSSEM

오픈 소스 보안 이벤트 메타데이터 OSSEM 커뮤니티 주도 프로젝트로, 주로 보안 이벤트 로그의 문서화, 표준화 및 모델링에 초점을 맞추고 있습니다. https://ossemproject.com/intro.html 목표 보안 이벤트 로그의 데이터 표준화 및 변환을 개선하기 위해 공통 데이터 모델을 정의하고 공유합니다. 보안 이벤트 로그에서 식별된 데이터 구조 및 관계를 정의하고 공유합니다. 커뮤니티에 여러 보안 이벤트 로그에 대한 사전 형식의 상세 정보를 제공합니다. 보안 이벤트 로그Windows, Linux, MacOS,...

Information Disclosure

github.com/neuvector/neuvector is vulnerable to information disclosure. The vulnerability is due to passwords in Java command parameters being logged in security event logs when a process rule violation occurs, which allows an attacker to obtain sensitive credentials...

CVE-2025-41649

creationtimestamp| type| source ---|---|--- 2025-05-27 08:48:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17616 2025-05-27 09:07:04+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lq5dessbva62 2025-05-27 09:18:05+00:00| seen|...

CVE-2023-37557

creationtimestamp| type| source ---|---|--- 2023-08-03 16:40:01+00:00| seen| https://t.me/cibsecurity/67664 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-...

The dynamic duo: How to build a red and blue team to strengthen your cybersecurity, Part 2

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the first post of our new Voice of the Community blog series, Microsoft Product Marketing Manager Natalia Godyla talks with Jake Williams, Founder of...

OSSEM - Open Source Security Events Metadata

The Open Source Security Events Metadata OSSEM is a community-led project that focuses primarily on the documentation and standardization of security event logs from diverse data sources and operating systems. Security events are documented in a dictionary format and can be used as a reference fo...

Palo Alto Networks User-ID Agent < 7.0.4 TLS-Secured API Invocation Credential Disclosure (PAN-SA-2016-0007)

The version of Palo Alto Networks User-ID agent installed on the remote Windows host is prior to 7.0.4. It is, therefore, affected by a flaw that allows a TLS-secured API call to return encrypted credentials to the domain account configured on the User-ID agent, which has read-only rights for...

User-ID API Access

The Palo Alto Networks User-ID agent for Windows implements an API to retrieve the agent’s configuration. This TLS-secured API call returns encrypted credentials to the domain account configured on the User-ID agent, which has read-only rights for Security Event Logs on Domain Controllers. Anyone...

CVE-2012-0262

creationtimestamp| type| source ---|---|--- 2015-01-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41687 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/op5welcome.rb 2025-02-06 03:13:40+00:00| seen|...