uwezkhan
c19ed93ee3
confine uploaded_file to the upload directory in validateUploadedFile ( #11118 )
...
validateUploadedFile only checked that the value starts with
<workingdir>/tmp/upload, so a path such as
<workingdir>/tmp/upload/../../../../some/dir passed. uploaded_file is
client controlled (POST field, query string on a multipart request, or
a multipart filename containing ../) and is handed to
ntop.registerRuntimeInterface by rest/v2/add/ntopng/analyze_pcap.lua,
which opens it as a PcapInterface with delete_pcap_when_done, and to
ntop.unlink by the import endpoints.
Require the value to name a single entry directly inside the upload
directory, which is how mg_upload stores files.
2026-10-26 09:09:00 +01:00
GabrieleDeri
db89efbae2
Added traffic model menu, experimetnal features ( #11116 )
...
* Added traffic model menu
* Update dist
2026-10-23 15:21:50 +02:00
GabrieleDeri
ab445aab93
table.insert to ptr ref improvement, sites doc update ( #11113 )
...
* table.insert to ptr ref improvement
* Updated sites doc
2026-10-22 16:47:05 +02:00
Matteo Biscosi
01bc48c74d
Optimized and fixed top talkers not correctly calculated
2026-10-21 13:12:13 +02:00
Matteo Biscosi
d1545ef50e
Removed RDP server and added Windows Domain Controller
2026-10-13 11:32:27 +02:00
Manuel Ceroni
a66e1b9d07
Fixed missing http_lint validators for historical flow filters ( #11076 )
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-10-09 12:38:51 +02:00
Matteo Biscosi
e132b5b7cb
Added more server configurations ( #11057 )
2026-10-08 10:33:37 +02:00
Manuel Ceroni
1965d9a642
Added TTL to the tags modal ( #11062 )
2026-10-08 10:20:39 +02:00
Alfredo Cardigliano
41dba1669b
Move activation support
2026-10-05 15:25:53 +02:00
Alfredo Cardigliano
b92c73e987
Implement CH size limit ( #7541 )
2026-10-01 15:24:29 +02:00
Matteo Biscosi
4b1e4ac097
Removed open redirect check on referer linting
2026-10-01 10:35:36 +02:00
Matteo Biscosi
afa1296e76
Fixes referer linting
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-09-24 19:33:15 +02:00
Matteo Biscosi
8d434e62f8
Fixes referer validation
2026-09-23 17:25:08 +02:00
Matteo Biscosi
e2c357f45a
Fixes missing lint
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-09-22 18:48:21 +02:00
Matteo Biscosi
3a6fcd5f37
Added exception id to add/edit exception rules
2026-09-22 12:31:09 +02:00
Matteo Biscosi
40c0665833
Added wazuh pattern test and fixes incorrect labels ( #10971 #10968 )
2026-09-21 17:07:36 +02:00
Manuel Ceroni
d711b6f99a
Added flow risk list to tag editing ( #10950 )
...
* Added flow risk list to tag editing
* Updated dist
2026-09-17 11:42:25 +02:00
Manuel Ceroni
16c393c3e8
Implemented a breakdown to select applications for tags ( #10935 )
2026-09-17 10:12:12 +02:00
Alfredo Cardigliano
282e37ce68
Add Requested Server Name / SNI column (move the name from the json to the native column)
2026-09-14 17:03:47 +02:00
Alfredo Cardigliano
1dcaf051bd
Add back activation_code
2026-09-04 09:42:03 +02:00
GabrieleDeri
b7a7ef8fbd
Added toggle to flow details pref ( #10879 )
2026-09-01 16:36:04 +02:00
Matteo Biscosi
b2bc2f748f
Added startssl option to email endpoints ( #10843 )
2026-09-01 14:12:14 +00:00
GabrieleDeri
26d5cffb2f
Update dist ( #10873 )
2026-08-31 14:18:48 +02:00
Alfredo Cardigliano
00613d75f9
Change wazuh_alerts schema to handle retention based on partitions (use partition by day, remove TTL). Add pref to configure retention.
2026-08-26 12:14:57 +02:00
Alfredo Cardigliano
10615a1076
Extend delete_data_utils to support full ClickHouse and data dir purge
2026-08-21 16:13:04 +02:00
Alfredo Cardigliano
1fc93a8c72
Add application latency column consistent with network latency
2026-08-21 10:17:31 +02:00
Alfredo Cardigliano
7deb869d45
Add next hop and next hop site to CH
2026-08-18 11:16:51 +02:00
Matteo Biscosi
a7f49036b8
Changed the AS dropdown ( #10780 )
2026-08-15 08:29:41 +00:00
GabrieleDeri
cc80aa52db
Added AI policy runner, license expiration check ( #10777 )
2026-08-14 19:02:58 +02:00
Matteo Biscosi
d8bccabfac
Fixes interface roles moved to in and out
2026-08-14 15:13:08 +00:00
Matteo Biscosi
bf08169dbd
Fixes historical flows custom fields
2026-08-13 15:29:04 +00:00
Manuel Ceroni
4153fee8fc
Added token resend to the licenses page ( #10769 )
2026-08-13 14:56:49 +02:00
GabrieleDeri
679f832f4e
Improves wazuh alert details ( #10767 )
...
* Improves wazuh alert details
* Update dist
2026-08-13 13:32:29 +02:00
GabrieleDeri
8f79490666
Added wazuh info button ( #10762 )
...
* Added wazuh info button
* Update dist
2026-08-12 22:28:06 +02:00
Matteo Biscosi
c5db10d3b1
Added products licenses page
2026-08-10 16:42:50 +00:00
GabrieleDeri
cefd72fd78
Update dist ( #10734 )
2026-08-10 14:03:32 +02:00
GabrieleDeri
8020b856fb
Fixes live flows new card ( #10733 )
...
* Update dist
* Fixes live flows new card
* Update dist
2026-08-10 12:57:38 +02:00
Manuel Ceroni
da22f6f85d
Added Location and Site filters to flows aggregated by host ( #10708 )
2026-08-06 15:06:07 +02:00
Matteo Biscosi
9ad98f54cb
Fixes port linter
2026-08-05 16:20:03 +00:00
Alfredo Cardigliano
b03b94c013
Add a traffic recording advanced section for configuring file size, snaplen, etc.
2026-08-04 11:26:03 +02:00
Manuel Ceroni
b441768935
Fixed the CSV import of SNMP devices ( #10673 )
2026-07-31 10:57:19 +02:00
GabrieleDeri
d3425d2a9b
Update dist ( #10672 )
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-07-30 23:03:03 +02:00
DGabri
60ceacc76d
Added flow risk filter
2026-07-27 19:46:39 +02:00
Matteo Biscosi
db55fae4f9
Added ACL scope filters
2026-07-21 14:20:57 +00:00
Manuel Ceroni
222b0ca641
Fixed SNMP interfaces table in site SNMP dashboard ( #10622 )
2026-07-21 10:40:45 +02:00
Luca Deri
3be0129821
Added check
2026-07-20 12:54:58 +02:00
GabrieleDeri
dec95a617e
Refactored sites dashboard in components ( #10617 )
...
* Refactored sites dashboard in components
* Update dist
2026-07-20 12:16:14 +02:00
Alfredo Cardigliano
d9268005da
Fix http_lint.validateSingleWord/http_lint.validateMessage
2026-07-16 10:51:08 +02:00
Alfredo Cardigliano
fda269014c
Add validator for nmap ports (list or range)
2026-07-16 10:41:32 +02:00
Alfredo Cardigliano
8ae9d8e989
Rename probe_ip to exporter_ip when used for exporters
2026-07-14 15:47:19 +02:00