aws_public_ips

awspublicips...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

DomainFrontDiscover

DomainFrontDiscover 用于发现可进行域前置的CloudFront域的脚本和结果 关于此过程的详细说明请访问 https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt 一份包含93k+个经确认可用于通过CloudFront进行域前置的域列表（2018年2月22日）。 ConfirmedFrontableDomains-Alexa1M.txt...

cloudfrunt

CloudFrunt CloudFrunt es una herramienta para identificar dominios de CloudFront mal configurados. Antecedentes CloudFront es una Red de Entrega de Contenido CDN proporcionada por Amazon Web Services AWS. Los usuarios de CloudFront crean "distribuciones" que sirven contenido desde fuentes...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sops, terraform-provider-grafana, argo-events, snyk-cli, kserve, kubeflow, crossplane-provider-aws-route53, k3s, dask-gateway, nri-prometheus, descheduler, kuberay-operator, conftest, apisix-ingress-controller, kube-state-metrics, rekor, litestream, mattermost,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: sops, kaf, argo-events, snyk-cli, terraform-provider-azapi, pulumi-language-dotnet, crossplane-provider-aws-route53, k3s, dagger, grype, teleport, cloudflared, mattermost, crossplane-provider-azure-managedidentity, neuvector-sigstore-interface, src,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sops, rancher-system-agent, kubeflow, k3s, whereabouts, dask-gateway, descheduler, kustomize, kuberay-operator, conftest, litestream, extism, mattermost, neuvector-sigstore-interface, src, crossplane-provider-aws-ec2, hubble-ui, aws-privateca-issuer,...

MAL-2026-10710 Malicious code in @equans-services/codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3c5a7e22ef9ecb88e2f6d85ef6132d80098e3e187cbc302de2c45140a5a5f1 This package typosquats @openai/codex under an unofficial scope and ships a postinstall hook package.json line 6: "postinstall": "node setup.js" that...

Malicious code in @equansservices/tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb693b5ae7f1fccb6c2aaa1a5f9225b23fb7ece3928feca604f2c5139ee5198 The package's postinstall hook node setup.js fetches a platform-specific payload from http://d2vf4rs175cy2k.cloudfront.net/install/v1/plugin.zip over...

MAL-2026-10400 Malicious code in @equansservices/tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb693b5ae7f1fccb6c2aaa1a5f9225b23fb7ece3928feca604f2c5139ee5198 The package's postinstall hook node setup.js fetches a platform-specific payload from http://d2vf4rs175cy2k.cloudfront.net/install/v1/plugin.zip over...

MAL-2026-10094 Malicious code in @equansservices/setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b071598889a04c74a8398157555ccfffda5bbc713429df4cafbcf48df7f811af package.json declares a postinstall hook node setup.js that fires automatically on npm install. setup.js selects a platform-specific target and fetch...

CVE-2026-13762

Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This issue was...

PT-2026-53691

Name of the Vulnerable Software and Affected Versions Amazon CloudFront affected versions not specified Description An inconsistent interpretation of HTTP/2 requests in Amazon CloudFront when AWS WAF is enabled may allow remote actors to bypass managed rule body inspection. This occurs through...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: argo-events, sealed-secrets, snyk-cli, crossplane-provider-aws-opensearchserverless, tekton-chains-fips, gatus-fips, cloudbeat, rancher, nfpm, argo-events-fips, gitea, prometheus-elasticsearch-exporter, argo-workflows, juicefs, crossplane-provider-aws-wafv2, mapotf,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: argo-events, sealed-secrets, snyk-cli, crossplane-provider-aws-opensearchserverless, tekton-chains-fips, gatus-fips, cloudbeat, rancher, nfpm, argo-events-fips, gitea, prometheus-elasticsearch-exporter, argo-workflows, juicefs, crossplane-provider-aws-wafv2, mapotf,...

PT-2026-49736

Summary On AWS Lambda@Edge, CloudFront delivers a request header that appears more than once as several separate entries. The adapter writes each value with Headers.set instead of Headers.append, so every value overwrites the previous one and only the last reaches the application. Repeated reques...

terraform-aws-wafacl-golden

terraform-aws-wafacl-golden !Terraformhttps://img.shields...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: argo-events, sealed-secrets, snyk-cli, crossplane-provider-aws-opensearchserverless, tekton-chains-fips, gatus-fips, cloudbeat, rancher, nfpm, argo-events-fips, gitea, prometheus-elasticsearch-exporter, argo-workflows, juicefs, crossplane-provider-aws-wafv2, mapotf,...

CVE-2026-46597 vulnerabilities

Vulnerabilities for packages: argo-events, sealed-secrets, snyk-cli, crossplane-provider-aws-opensearchserverless, tekton-chains-fips, gatus-fips, cloudbeat, rancher, nfpm, argo-events-fips, gitea, prometheus-elasticsearch-exporter, argo-workflows, juicefs, crossplane-provider-aws-wafv2, mapotf,...