apche-struts-vuln-demo-cve-2018-11776

Apache Struts漏洞演示 CVE-2018-11776 描述 搭建一个隔离的测试环境，用于实验Apache Struts漏洞CVE-2018-11776。 开始使用 要启动测试环境，请运行以下命令： aws cloudformation create-stack \ --template-body file://cfn.yml \ --stack-name \ --parameters \ ParameterKey=Ec2KeyName,ParameterValue= \ ParameterKey=Linux2Ami,ParameterValue= 使用方法 1...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kots, newrelic-infra-operator, act, kubeflow, argo-events, cluster-autoscaler, envconsul, slsa-verifier, crossplane-provider-aws-firehose, kubernetes, crossplane-provider-aws-lambda, cert-exporter, fuse-overlayfs-snapshotter, kubeflow-pipelines,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kots, trivy-operator, act, argo-events, slsa-verifier, crossplane-provider-aws-firehose, kine, kubernetes, crossplane-provider-aws-lambda, pulumi-kubernetes-operator, teleport, scorecard, buildah, tflint, cloud-provider-aws, crossplane-provider-aws-memorydb,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler, newrelic-infra-operator, verticadb-operator, ghaudit, secrets-store-csi-driver-provider-aws, kubeflow, rabbitmq-messaging-topology-operator, juicefs, slsa-verifier, undock, crossplane-provider-aws-firehose, kine, minio-operator,...

CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Cloud One - Workload Security Log4Shell This repo contains a q...

How to Deploy FLR Relay Proxy

Deprecated Feature The FLR Relay Proxy feature described in this article was deprecated in Veeam Plug-In for AWS 7. In deployments where the feature was enabled before upgrading to Veeam Plug-In for AWS 7, the FLR Relay tab will still appear in the options. However, for Veeam Plug-In for AWS 7...

CVE-2017-9450

The Amazon Web Services AWS CloudFormation bootstrap tools package aka aws-cfn-bootstrap before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory...

Important: aws-cfn-bootstrap

Issue Overview: The default umask value is set to 022 to address a privilege escalation security vulnerability. Affected Packages: aws-cfn-bootstrap Issue Correction: Run yum update aws-cfn-bootstrap or yum update --advisory ALAS-2017-895 to update your system. 1. Run yum update aws-cfn-bootstrap...

Important: aws-cfn-bootstrap

Issue Overview: New optional parameter "umask" introduced into cfn-hup.conf file in order to configure the cfn-hup daemon's umask. The Amazon Web Services AWS CloudFormation bootstrap tools package aka aws-cfn-bootstrap before 1.4-19.10 allows local users to execute arbitrary code with root...