Commit graph

1194 commits

Author SHA1 Message Date
uwezkhan
c19ed93ee3
confine uploaded_file to the upload directory in validateUploadedFile (#11118)
validateUploadedFile only checked that the value starts with
<workingdir>/tmp/upload, so a path such as
<workingdir>/tmp/upload/../../../../some/dir passed. uploaded_file is
client controlled (POST field, query string on a multipart request, or
a multipart filename containing ../) and is handed to
ntop.registerRuntimeInterface by rest/v2/add/ntopng/analyze_pcap.lua,
which opens it as a PcapInterface with delete_pcap_when_done, and to
ntop.unlink by the import endpoints.

Require the value to name a single entry directly inside the upload
directory, which is how mg_upload stores files.
2026-10-26 09:09:00 +01:00
GabrieleDeri
db89efbae2
Added traffic model menu, experimetnal features (#11116)
* Added traffic model menu

* Update dist
2026-10-23 15:21:50 +02:00
GabrieleDeri
ab445aab93
table.insert to ptr ref improvement, sites doc update (#11113)
* table.insert to ptr ref improvement

* Updated sites doc
2026-10-22 16:47:05 +02:00
Matteo Biscosi
01bc48c74d Optimized and fixed top talkers not correctly calculated 2026-10-21 13:12:13 +02:00
Matteo Biscosi
d1545ef50e Removed RDP server and added Windows Domain Controller 2026-10-13 11:32:27 +02:00
Manuel Ceroni
a66e1b9d07
Fixed missing http_lint validators for historical flow filters (#11076)
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-10-09 12:38:51 +02:00
Matteo Biscosi
e132b5b7cb Added more server configurations (#11057) 2026-10-08 10:33:37 +02:00
Manuel Ceroni
1965d9a642
Added TTL to the tags modal (#11062) 2026-10-08 10:20:39 +02:00
Alfredo Cardigliano
41dba1669b Move activation support 2026-10-05 15:25:53 +02:00
Alfredo Cardigliano
b92c73e987 Implement CH size limit (#7541) 2026-10-01 15:24:29 +02:00
Matteo Biscosi
4b1e4ac097 Removed open redirect check on referer linting 2026-10-01 10:35:36 +02:00
Matteo Biscosi
afa1296e76 Fixes referer linting
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-09-24 19:33:15 +02:00
Matteo Biscosi
8d434e62f8 Fixes referer validation 2026-09-23 17:25:08 +02:00
Matteo Biscosi
e2c357f45a Fixes missing lint
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-09-22 18:48:21 +02:00
Matteo Biscosi
3a6fcd5f37 Added exception id to add/edit exception rules 2026-09-22 12:31:09 +02:00
Matteo Biscosi
40c0665833 Added wazuh pattern test and fixes incorrect labels (#10971 #10968) 2026-09-21 17:07:36 +02:00
Manuel Ceroni
d711b6f99a
Added flow risk list to tag editing (#10950)
* Added flow risk list to tag editing

* Updated dist
2026-09-17 11:42:25 +02:00
Manuel Ceroni
16c393c3e8
Implemented a breakdown to select applications for tags (#10935) 2026-09-17 10:12:12 +02:00
Alfredo Cardigliano
282e37ce68 Add Requested Server Name / SNI column (move the name from the json to the native column) 2026-09-14 17:03:47 +02:00
Alfredo Cardigliano
1dcaf051bd Add back activation_code 2026-09-04 09:42:03 +02:00
GabrieleDeri
b7a7ef8fbd
Added toggle to flow details pref (#10879) 2026-09-01 16:36:04 +02:00
Matteo Biscosi
b2bc2f748f Added startssl option to email endpoints (#10843) 2026-09-01 14:12:14 +00:00
GabrieleDeri
26d5cffb2f
Update dist (#10873) 2026-08-31 14:18:48 +02:00
Alfredo Cardigliano
00613d75f9 Change wazuh_alerts schema to handle retention based on partitions (use partition by day, remove TTL). Add pref to configure retention. 2026-08-26 12:14:57 +02:00
Alfredo Cardigliano
10615a1076 Extend delete_data_utils to support full ClickHouse and data dir purge 2026-08-21 16:13:04 +02:00
Alfredo Cardigliano
1fc93a8c72 Add application latency column consistent with network latency 2026-08-21 10:17:31 +02:00
Alfredo Cardigliano
7deb869d45 Add next hop and next hop site to CH 2026-08-18 11:16:51 +02:00
Matteo Biscosi
a7f49036b8 Changed the AS dropdown (#10780) 2026-08-15 08:29:41 +00:00
GabrieleDeri
cc80aa52db
Added AI policy runner, license expiration check (#10777) 2026-08-14 19:02:58 +02:00
Matteo Biscosi
d8bccabfac Fixes interface roles moved to in and out 2026-08-14 15:13:08 +00:00
Matteo Biscosi
bf08169dbd Fixes historical flows custom fields 2026-08-13 15:29:04 +00:00
Manuel Ceroni
4153fee8fc
Added token resend to the licenses page (#10769) 2026-08-13 14:56:49 +02:00
GabrieleDeri
679f832f4e
Improves wazuh alert details (#10767)
* Improves wazuh alert details

* Update dist
2026-08-13 13:32:29 +02:00
GabrieleDeri
8f79490666
Added wazuh info button (#10762)
* Added wazuh info button

* Update dist
2026-08-12 22:28:06 +02:00
Matteo Biscosi
c5db10d3b1 Added products licenses page 2026-08-10 16:42:50 +00:00
GabrieleDeri
cefd72fd78
Update dist (#10734) 2026-08-10 14:03:32 +02:00
GabrieleDeri
8020b856fb
Fixes live flows new card (#10733)
* Update dist

* Fixes live flows new card

* Update dist
2026-08-10 12:57:38 +02:00
Manuel Ceroni
da22f6f85d
Added Location and Site filters to flows aggregated by host (#10708) 2026-08-06 15:06:07 +02:00
Matteo Biscosi
9ad98f54cb Fixes port linter 2026-08-05 16:20:03 +00:00
Alfredo Cardigliano
b03b94c013 Add a traffic recording advanced section for configuring file size, snaplen, etc. 2026-08-04 11:26:03 +02:00
Manuel Ceroni
b441768935
Fixed the CSV import of SNMP devices (#10673) 2026-07-31 10:57:19 +02:00
GabrieleDeri
d3425d2a9b
Update dist (#10672)
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-07-30 23:03:03 +02:00
DGabri
60ceacc76d Added flow risk filter 2026-07-27 19:46:39 +02:00
Matteo Biscosi
db55fae4f9 Added ACL scope filters 2026-07-21 14:20:57 +00:00
Manuel Ceroni
222b0ca641
Fixed SNMP interfaces table in site SNMP dashboard (#10622) 2026-07-21 10:40:45 +02:00
Luca Deri
3be0129821 Added check 2026-07-20 12:54:58 +02:00
GabrieleDeri
dec95a617e
Refactored sites dashboard in components (#10617)
* Refactored sites dashboard in components

* Update dist
2026-07-20 12:16:14 +02:00
Alfredo Cardigliano
d9268005da Fix http_lint.validateSingleWord/http_lint.validateMessage 2026-07-16 10:51:08 +02:00
Alfredo Cardigliano
fda269014c Add validator for nmap ports (list or range) 2026-07-16 10:41:32 +02:00
Alfredo Cardigliano
8ae9d8e989 Rename probe_ip to exporter_ip when used for exporters 2026-07-14 15:47:19 +02:00