5530 matches found
GHSA-8WX3-324G-W4QQ OpenSearch uncontrolled resource consumption
Impact An issue has been identified with how OpenSearch handled incoming requests on the HTTP layer. An unauthenticated user could force an OpenSearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering an...
OpenSearch uncontrolled resource consumption
Impact An issue has been identified with how OpenSearch handled incoming requests on the HTTP layer. An unauthenticated user could force an OpenSearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering an...
Important Photon OS Security Update - PHSA-2023-4.0-0491
Updates of 'go', 'linux-aws', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
MAL-2023-8370 Malicious code in tencent-cloud-python-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security bf236cca18e4d157a57cd3de7abed8ad967103c42b9ae53f5026174af46b64a4 Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
MAL-2023-8362 Malicious code in python-alibabacloud-sdk-core (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1384f0a4ed6515eb7e720621346f74f53217b73863f4c5e3cda4fc90b52f49e3 Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
MAL-2023-8359 Malicious code in aws-enumerate-iam (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 96d7eea455989a7a10bf2fafd9f9c4a2d5d9a4c2a3ec852e424885f3e51c5edb Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
MAL-2023-8353 Malicious code in alibabacloud-oss2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d804868504b96ba968b7eae99df63e235a0eaa2eab4a7951ae02c98c614f1828 Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
MAL-2023-8355 Malicious code in alisdkcore (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 456242a426a17eeaca869a5f00ee2f02d837dec5bba7da9240b6bec77c0ae8a8 Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
MAL-2023-8363 Malicious code in python-alibabacloud-tea-openapi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1a75cd94261db49f7ab1e359b2579e7645756a48f20eb6a49465f980f5c2b43d Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
MAL-2023-8361 Malicious code in enumerate-iam-aws (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 46f8fde812a7274ad1e270e0cc3a8698349365af5d85ee9b89248fa467e5bf2f Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...
Moderate: Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
ec2-107-22-78-232.compute-1.amazonaws.com Open Redirect vulnerability OBB-3743134
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Important Photon OS Security Update - PHSA-2023-4.0-0488
Updates of 'linux-esx', 'linux-aws', 'gawk', 'wireshark', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager, gke-gcloud-auth-plugin, kubernetes-ingress-defaultbackend, prometheus-pushgateway, prometheus-postgres-exporter, gobuster, prometheus-mongodb-exporter-fips, kubeflow-katib, prometheus-adapter, aws-load-balancer-controller,...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager, gke-gcloud-auth-plugin, kubernetes-ingress-defaultbackend, prometheus-pushgateway, prometheus-postgres-exporter, gobuster, prometheus-mongodb-exporter-fips, kubeflow-katib, prometheus-adapter, aws-load-balancer-controller,...
Google, Cloudflare, and AWS Disclose Largest DDoS Attack in History
By Deeba Ahmed Google, Cloudflare, and AWS Disclosed Digital History’s Largest Ever DDoS Attack- Courtesy HTTP/2 Zero-day. This is a post from HackRead.com Read the original post: Google, Cloudflare, and AWS Disclose Largest DDoS Attack in History...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, scorecard, prometheus-postgres-exporter, gobuster, kubeflow-katib, prometheus-adapter, configmap-reload-fips, flux-source-controller, node-problem-detector, ollama, kubeflow, memcached-exporter, nfs-subdir-external-provisioner-fips, helm,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, pulumi-language-yaml, flux-kustomize-controller, kubevela, scorecard, gke-gcloud-auth-plugin, grype, metacontroller, src, flux-source-controller, nginx-stable, slsa-verifier, ollama, oauth2-proxy, frp, ip-masq-agent, terraform, cue,...
