edge

Cloud edge - Whois für die Cloud Ermitteln Sie zu einer IP den Cloud-Anbieter und weitere Details basierend auf den veröffentlichten JSON-, CSV- oder Textdaten des Anbieters Cloud edge ist ein Recon-Tool, das auf die Erkundung von Cloud-Service-Providern spezialisiert ist. Es kann für...

powerfulseal

PowerfulSeal PowerfulSeal injiziert Fehler in Ihre Kubernetes-Cluster, damit Sie Probleme so früh wie möglich erkennen können. Es ermöglicht, Szenarien zu schreiben, die vollständige Chaos-Experimente beschreiben. Begrüßen Sie das unvermeidliche Scheitern. Begrüßen Sie den Seal. Dokumentation Bit...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

burp-vps-proxy

Burp VPS Proxy: Einfache Cloud-Proxys für Burp Suite Erste Schritte » Funktionen · Anbieter · Haftungsausschluss 📖 Über Burp VPS Proxy ist eine Burp-Suite-Erweiterung, die das automatische Erstellen und Löschen von vorgelagerten SOCKS5-Proxys bei bekannten Cloud-Anbietern direkt aus Burp Suite...

OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks

The Top 10 Neocloud and AI Data Center Security Risks FORGE - Harden the metal beneath the model. 🌐 Website: https://forge-framework.io Executive Summary AI workloads depend on complex infrastructure spanning accelerators, high-speed networks, storage, orchestration platforms, identity systems,...

cloud_ip_ranges

Cloud-IP-Bereiche Beschreibung Die meisten Cloud-Anbieter veröffentlichen aktuelle Listen ihrer IP-Adressbereiche. Dieses Tool ermittelt, ob eine IP zu den Bereichen eines Anbieters gehört, indem es die neuesten Listen abruft und analysiert. Unterstützt: AWS Quelle Azure Quelle Google Cloud...

GHSA-J2G6-362Q-6QC6 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure-fips, velero-plugin-for-microsoft-azure, velero-plugin-for-aws, velero-plugin-for-aws-fips, velero-plugin-for-gcp-fips, velero-plugin-for-gcp...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

CVE-2026-53227 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-qemu, linux-gcp, linux-aws, linux-vmware...

Multiple Node.js Modules compromised in npm supply chain attack (Shai-Hulud 'Miasma') (06/01/2026)

The remote host has a version of one or more Node.js modules installed known to be compromised in the Shai-Hulud 'Miasma' npm supply chain attack reported on 06/01/2026. This wave compromised 32 packages 96 versions published under the '@redhat-cloud-services' npm scope. It is tracked separately...

Improper Access Control

Rancher is vulnerable to Improper Access Control. The vulnerability is due to missing authorization checks when handling cloud-credential IDs, which allows an attacker to make unauthorized requests to cloud providers using attached credentials...

CVE-2026-34719

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-local addresses — only the URL scheme HTTP/HTTPS as well as the hostname was checked. This could end up in retrieving...

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services AWS secrets, shell command history, Stripe API keys, and GitHub tokens at scale. Cisco Talos...

Keys on Doormats: Exposed API Credentials on the Web

Application programming interfaces APIs have become a central part of the modern IT environment, allowing developers to enrich the functionality of applications and interact with third parties such as cloud and payment providers. This interaction often occurs through authentication mechanisms tha...

Agent Grant: From Identity Signals to Measurable Risk Reduction

Executive Summary Identity is now the 1 attack surface. Agent Grant in Qualys ETM Identity uses agentic AI to measure and reduce identity risk across AD, Entra, Okta & other cloud IdPs/IDaaS. It operationalizes identity risk by turning messy Active Directory & identity-risk signals into validated...

Code Injection

Gardener Extensions is vulnerable to Code Injection. The vulnerability is due to improper handling of user-controlled input in Terraformer-based infrastructure provisioning across AWS, Azure, OpenStack, and GCP providers, which allows an attacker with administrative privileges in a Gardener proje...

CVE-2025-59823 Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...

secrets-store-sync-controller discloses service account tokens in logs

Hello Kubernetes Community, A security issue was discovered in secrets-store-sync-controller where an actor with access to the controller logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vau...