tsfresh

tsfresh 本仓库包含 TSFRESH Python 软件包。该缩写代表 “基于可扩展假设检验的时间序列特征提取” 。 该软件包将统计学、时间序列分析、信号处理和非线性动力学中的成熟算法与稳健的特征选择算法相结合，提供系统化的时间序列特征提取。在此语境下，术语 时间序列 以最广泛的意义理解，因此任何类型的采样数据甚至事件序列都可以被表征。 在特征工程上花费更少时间 数据科学家往往将大部分时间花在清洗数据或构建特征上。我们无法改变前者，但后者可以自动化。 TSFRESH 通过自动提取特征，释放你花在构建特征上的时间。因此，你会有更多时间去研究最新的深度学习论文、浏览 Hacker Ne...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection 一个针对 OpenTSDB = 2.4.1 命令注入（CVE-2023-36812/CVE-2023-25826）的利用工具，使用 Fortran 编写 关于 这是一个针对 OpenTSDB 2.4.1 及更早版本（CVE-2023-36812/CVE-2023-25826）命令注入漏洞的利用工具。该利用工具使用现代 Fortran 编写，并利用了今年早些时候官方发布的 Fortran http-client 库。 漏洞详情 OpenTSDB 是一个用 Java 编写的开源时序数据库。2020 年，在 2.4.0...

darts

Time Series Made Easy in Python Darts is a Python library for user-friendly forecasting and anomaly detection on time series. It contains a variety of models, from classics such as ARIMA to deep neural networks. The forecasting models can all be used in the same way, using fit and predict...

AIX360

AI Explainability 360 v0.3.0 ✨ 新动态： IBM Research 推出了新的 In-Context Explainability 360 ICX360 工具包，将可解释性扩展到了 LLM ，特别是针对提供给 LLM 的输入。欢迎查看！ 🚀✨ AI Explainability 360 工具包是一个开源库，支持数据集和机器学习模型的可解释性与可解释分析。AI Explainability 360 Python 包包含一套全面的算法，涵盖了解释的不同维度以及代理解释性度量。AI Explainability 360 工具包支持表格、文本、图像和时间序列数据。 ...

Merlion

Merlion：时间序列机器学习库 目录 1. 简介 2. 与相关库的比较 3. 安装 4. 文档 5. 快速开始 1. 异常检测 2. 预测 6. 评估与基准测试 7. 技术报告与引用 Merlion 简介 Merlion 是一个用于时间序列智能的 Python 库。它提供了一个端到端的机器学习框架，包括加载和转换数据、构建和训练模型、后处理模型输出以及评估模型性能。它支持多种时间序列学习任务，包括单变量和多变量时间序列的预测、异常检测和变点检测。该库旨在为工程师和研究人员提供一站式解决方案，以便针对其特定的时间序列需求快速开发模型，并在多个时间序列数据集上对其进行基准测试。...

awesome-TS-anomaly-detection

awesome-TS-anomaly-detection Lista de herramientas y datasets para la detección de anomalías en datos de series temporales. Todas las listas están en orden alfabético. En las listas, los proyectos mantenidos tienen prioridad frente a los no mantenidos. Se considera que un repositorio está "no...

CVE-2019-20933

Laboratorio 5-CVE-2019-20933 I. ANÁLISIS DEL SISTEMA Identificación de la Superficie de Ataque Comenzando por lo que se está ejecutando en el entorno. Enumero todos los contenedores activos: root@kitploit: docker ps La víctima expone un único puerto:8086. Actualmente, no dispongo de información...

Linux Distros Unpatched Vulnerability : CVE-2026-48050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's net/http/pprof handlers at /debug/pprof/ via...

CVE-2026-55678

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...

CVE-2026-55678

Arc is an open, SQL-native time-series database for telemetry. In Enterprise cluster deployments from v26.02.1 to v26.06.2 , the coordinator accepts cluster join requests without authentication when cluster.enabled=true but cluster.shared_secret is empty. The HMAC validation in coordinator.go is ...

CVE-2026-55678 Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...

PT-2026-83343

Name of the Vulnerable Software and Affected Versions Arc versions 26.02.1 through 26.06.1 Description Arc Enterprise clustering allows cluster join requests without authentication when cluster.enabled is set to true but cluster.shared secret is not configured. A network attacker who can reach th...

CVE-2026-48105

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM internal/cluster/raft/fsm.go:applyRegisterFile accepts attacker-chosen file paths in manifest-registration proposals without validating them against the configured storage backend. T...

CVE-2026-48050

Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's net/http/pprof handlers at /debug/pprof/ via app.Usepprof.New in internal/api/server.go, and /debug/pprof is added to PublicPrefixes in cmd/arc/main.go. The auth middleware short-circuits before...

CVE-2026-48106

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope length, opcode of inbound messages. The MsgReplicateSync payload itself is...

CVE-2026-48106 Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope length, opcode of inbound messages. The MsgReplicateSync payload itself is...

EUVD-2026-64193

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope length, opcode of inbound messages. The MsgReplicateSync payload itself is...

EUVD-2026-64192

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM internal/cluster/raft/fsm.go:applyRegisterFile accepts attacker-chosen file paths in manifest-registration proposals without validating them against the configured storage backend. T...

CVE-2026-48105

Arc Enterprise (an open, SQL-native time-series database for telemetry) contains a path-traversal vulnerability in its Raft FSM (internal/cluster/raft/fsm.go:applyRegisterFile). Prior to version 26.06.1 , the function accepts attacker-chosen file paths in manifest-registration proposals with no v...

CVE-2026-47735 Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...