Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3180)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3180 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

Amazon Linux 2023 : docker (ALAS2023-2026-3205)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3205 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

Amazon Linux 2023 : rpcbind (ALAS2023-2026-3169)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3169 advisory. A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a...

Amazon Linux 2023 : php8.4, php8.4-bcmath, php8.4-cli (ALAS2023-2026-3163)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3163 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

Amazon Linux 2 : docker (ALASECS-2026-143)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-143 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the fin...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3197)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3197 advisory. An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt...

Amazon Linux 2023 : sudo, sudo-devel, sudo-logsrvd (ALAS2023-2026-3156)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3156 advisory. A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ...

Amazon Linux 2 : oci-add-hooks (ALASECS-2026-144)

The version of oci-add-hooks installed on the remote host is prior to 0-0.11.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-144 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside o...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3969)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5390.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3969 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would...

Amazon Linux 2023 : rsyslog, rsyslog-crypto, rsyslog-elasticsearch (ALAS2023-2026-3157)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3157 advisory. rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically...

Amazon Linux 2 : perl-HTTP-Date (ALAS-2026-3996)

The version of perl-HTTP-Date installed on the remote host is prior to 6.02-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3996 advisory. parsedate -- and str2time, which delegates to it -- used regexes withambiguous adjacent greedy runs year/clock/timezone digit...

Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2026-3161)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3161 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

s3enum

s3enum s3enum es una herramienta rápida y sigilosa para la enumeración de buckets de Amazon S3. Utiliza DNS en lugar de HTTP, lo que significa que las solicitudes no quedan registradas en los registros de acceso del servidor S3. Originalmente fue creada en 2016 para apuntar a GitHub. Instalación ...

s3tk

s3tk Un conjunto de herramientas de seguridad para Amazon S3 🍊 Probado en combate en Instacart Instalación Ejecuta: pip install s3tk Puedes usar la AWS CLI o AWS Vault para configurar tus credenciales de AWS: pip install awscli aws configure Consulta las políticas de IAM necesarias para cada...

bucket-stream

🚨 Bucket Stream ya no recibe mantenimiento. Si necesitas soporte o consultoría para tus esfuerzos de red team, envíame un correo a [email protected] 🚨 Bucket Stream Encuentra buckets interesantes de Amazon S3 observando los registros de transparencia de certificados. Esta herramienta...

nimbostratus

Nimbostratus Strumenti per il fingerprinting e lo sfruttamento delle infrastrutture cloud Amazon. Questi strumenti sono un PoC che ho sviluppato per il mio talk "Pivoting in Amazon clouds", realizzato utilizzando la grande libreria boto per accedere all'API di Amazon. Per maggiori informazioni...

CVE-2026-19585

A flaw was found in go-getter. A remote attacker can exploit a path traversal vulnerability to write files outside of the intended target directory during directory downloads from Amazon Simple Storage Service S3 or Google Cloud Storage GCS. By supplying specially crafted file paths within a remo...

openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:22035-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22035-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs...

CVE-2026-107322

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent contex...

CVE-2026-107322

The Amazon Agent Plugins for AWS databases-on-aws plugin, in versions prior to 1.7.1 , is vulnerable to an OS command injection (CWE-184). An attacker can execute arbitrary operating system commands on the host running the helper by providing a crafted database command value within the agent cont...