5505 matches found
SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API Access & More
Gaming giant SEGA Europe recently discovered that its sensitive data was being stored in an unsecured Amazon Web Services AWS S3 bucket during a cloud-security audit, and it’s sharing the story to inspire other organizations to double-check their own systems. Researcher Aaron Phillips with VPN...
SyntheticSun - A Defense-In-Depth Security Automation And Monitoring Framework Which Utilizes Threat Intelligence, Machine Learning, Managed AWS Security Services And, Serverless Technologies To Continuously Prevent, Detect And Respond To Threats
SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats. You sleep in fragmented glass With reflections o...
ec2-34-206-163-104.compute-1.amazonaws.com Improper Access Control vulnerability OBB-2318395
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
0s62bmu3aj.execute-api.us-east-1.amazonaws.com Open Redirect vulnerability OBB-2313010
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aws-archive-08qzqgaai-1639353783.remote-learner.net Cross Site Scripting vulnerability OBB-2310070
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Medium: aws-kinesis-agent
Issue Overview: A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map MDC input data can craft malicious input data that contains a recursive lookup and can...
Amazon Linux 2 : aws-kinesis-agent (ALAS-2021-1733)
The version of aws-kinesis-agent installed on the remote host is prior to 2.0.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1733 advisory. A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non- default Pattern Layo...
Ghana govt agency exposed 700k citizens’ data in a database mess up
By Deeba Ahmed Ghana’s National Service Secretariate - NSS - exposed 55GB worth of citizens' data when an AWS S3 bucket used by the Secretariate suffered misconfiguration. This is a post from HackRead.com Read the original post: Ghana govt agency exposed 700k citizens data in a database mess up...
Imperva Snapshot™ Scan: What You Can Find in the Report
Imperva Snapshot is a free AWS RDS security assessment tool. You can use this tool to gain in-depth visibility into your data and get a deep understanding about what data resides in your RDS and where your RDS database security gaps are. Acquiring this intelligence is a key element and critical...
Important Photon OS Security Update - PHSA-2021-0345
Updates of 'linux', 'linux-aws', 'linux-secure', 'linux-esx', 'runc', 'linux-rt' packages of Photon OS have been released...
German audio tech giant Sennheiser exposed 55GB of customers’ data
By Waqas Sennheiser left personal data of over 28,000 customers exposed on a misconfigured Amazon Web Services AWS server. This is a post from HackRead.com Read the original post: German audio tech giant Sennheiser exposed 55GB of customers data...
Critical: aws-kinesis-agent
Issue Overview: Amazon Kinesis Agent versions within Amazon Linux 2 AL2 prior to aws-kinesis-agent-2.0.4-1 included a version of Apache Log4j affected by CVE-2021-44228 and CVE-2021-45046. The Amazon Kinesis Agent has been updated to aws-kinesis-agent-2.0.4-1 within Amazon Linux 2 that mitigates...
Amazon Linux 2 : aws-kinesis-agent (ALAS-2021-1730)
The version of aws-kinesis-agent installed on the remote host is prior to 2.0.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1730 advisory. Amazon Kinesis Agent versions within Amazon Linux 2 AL2 prior to aws-kinesis-agent-2.0.4-1 included a version of...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
This is a PoC exploit for CVE-2021-44228, a vulnerability in the...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Cloud One - Workload Security Log4Shell This repo contains a q...
Important Photon OS Security Update - PHSA-2021-0138
Updates of 'linux-aws', 'linux-secure', 'vim', 'linux-rt', 'linux', 'linux-esx' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2021-4.0-0138
Updates of 'linux-esx', 'linux-aws', 'vim', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
CVE-2021-44833
The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file...
