USN-6746-2: Google Guest Agent and Google OS Config Agent vulnerability

USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacke...

USN-6746-2 google-guest-agent, google-osconfig-agent vulnerability

USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacke...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: trivy, zarf, conftest-fips, grype, conftest, kots, k9s, snyk-cli, tfsec, kubescape, terraform, wolfictl, zot, terragrunt, trivy-fips, tflint...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tflint, kubescape, snyk-cli, trivy, zarf, terraform, kots, k9s, conftest, terragrunt, zot, wolfictl, grype, tfsec...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: trivy, zarf, conftest-fips, grype, conftest, kots, k9s, snyk-cli, tfsec, kubescape, terraform, wolfictl, zot, terragrunt, trivy-fips, tflint...

Malicious code in aws_codedeploy-agent (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5171 Malicious code in gen-agent-fingerprint (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gen-agent-fingerprint (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2885 Malicious code in portm-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in portm-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lifetime-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2610 Malicious code in lifetime-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

CloudBrute - Awesome Cloud Enumerator

A tool to find a company target infrastructure, files, and apps on the top cloud providers Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode. The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike. The complete writeup is available. here Motivation ...

Malicious code in @terraform-aws-github-runner/gh-agent-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2420 Malicious code in @terraform-aws-github-runner/gh-agent-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 275. Vulnerability Details CVEID:CVE-2023-3978 DESCRIPTION: Golang html package is vulnerable to cross-site scripting, caused by improper validation of user-supplied input...

Session Hijacking

silverstripe/framework is vulnerable to Session Hijacking. The vulnerability is due to a malfunction in the security protection designed to detect changes in the User-Agent header, which allows an attacker to modify the header without invalidating the user session...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-647 advisory. 2024-07-17: CVE-2024-30255 was added to this advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a serve...

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-037)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-037 advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling...

The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, arises from insecure privilege management. This allows attackers to trigger service interruptions.

The vulnerability of the Palo Alto Networks Cortex XDR Agent, which is used for network traffic analysis, network detection, and response, relates to insecure privilege management. Exploiting this vulnerability could allow attackers to trigger service failures...