All pull requests

Pull requests

• fix(vpatch-CVE-2023-42793): scope TeamCity auth bypass to /app/rest/ paths (#1852)

  #1997·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(proxmox-logs): strip ::ffff: prefix from IPv4-mapped IPv6 addresses (#1934)

  #1996·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(pf-logs): parse TCP sequence ranges and optional sequence numbers (#1850)

  #1995·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(nextcloud-whitelist): allow WebDAV PUT requests on /remote.php/dav/ (#1915)

  #1994·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(keycloak-logs): guard ParseKV to prevent errors on non-audit lines (#1908)

  #1993·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(traefik-logs): allow alphanumeric protocols like h2c:// in backend URL (#1966)

  #1992·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(caddy-logs): parse OPNsense bracketless JSON lines

  #1991·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(scenarios): avoid 4 regex compiles per HTTP line

  #1990·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(naxsi-logs): parse extended NAXSI_EXLOG (rid, encoded URI, pipe zone)

  #1989·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(plex-allowlist): allow subtitle transcode bursts on HTTP 400

  #1988·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• fix(traefik-logs): parse CLF lines with escaped quotes in User-Agent

  #1987·hrithiksaini99 opened Nov 7, 2026·

  ·
  1

• Bot detect fix experimental docs and scores

  #1984·buixor opened Nov 5, 2026Contributor·

  ·
  1

• sshd-logs: parse OpenSSH 9.6 auth exhaustion messages

  #1981·hrithiksaini99 opened Nov 4, 2026·6 tasks done·

  ·
  1

• challenge: exclude Google inspection & verification fetchers

  #1980·Yuri989 opened Nov 4, 2026·

  ·
  1

• fix(traefik-logs): parse CLF fields with escaped quotes

  waiting-for-user
  #1978·stephdl opened Nov 3, 2026·6 tasks done·

  ·
  1

  4

• Support h2c backend URL scheme in traefik-logs (#1966)

  #1975·rafaelsoje opened Nov 2, 2026Contributor·5 of 6 tasks·

  ·
  1

• appsec-configs: Allow forgejo's path blocked by WAF

  #1974·Dryusdan opened Nov 2, 2026·4 of 6 tasks·

  ·

• sshd-logs: parse MaxAuthTries exhaustion lines (OpenSSH 9.6+)

  #1972·ferr079 opened Oct 30, 2026·5 of 6 tasks·

  ·
  1

• Add frontq/ai-secrets-probing scenario

  #1967·PeterWessberg opened Oct 28, 2026·5 of 6 tasks·

  ·

• Add NPMpro parser, web UI login bruteforce scenario and collection

  #1961·TheBlackBush opened Oct 25, 2026·5 of 6 tasks·

  ·
  7

• [Parser & Scenario] DECTRAX: Autonomous Cyber Deception & Honeypot Breach Remediation

  waiting-for-user
  #1960·Sadman-TheDentian opened Oct 22, 2026·

  ·
  9

• feat: Add Bifrost log parser and brute force scenario

  #1958·sdwilsh opened Oct 22, 2026Contributor·6 tasks done·

  ·
  3

• fix(nextcloud-whitelist): whitelist Nextcloud Memories endpoints

  waiting-for-user
  #1947·JMarcosHP opened Oct 18, 2026Contributor·5 of 6 tasks·

  ·
  1

  1

• feat: add new scenario for common HTTP path traversal detection

  #1944·sayan9168 opened Oct 16, 2026·6 tasks done·

  ·

• fix(http-probing, http-crawl-non_statics): use evt.Meta.target_fqdn in groupby

  #1936·rhuan001 opened Oct 14, 2026·

  ·
  1