sisu

sisu ⚡ Tu AWS, como un sistema de archivos. Esto: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json En lugar de esto: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

AWS-Threat-Simulation-and-Detection

使用 Stratus Red Team 进行 AWS 威胁检测 本仓库记录了我使用 Stratus Red Team 进行云环境对手模拟的实践经历。 Stratus Red Team 是“云上的 Atomic Red Team”，能够以细粒度且自包含的方式模拟攻击技术。 我们在 AWS 账户中逐一执行 Stratus Red Team 仓库中涵盖的攻击。为了监控这些攻击，我们将使用 CloudTrail 和 CloudWatch 进行日志记录，并将这些日志导入 SumoLogic 进行进一步分析。 攻击| 描述| 链接 ---|---|---...

CLEANSTART-2026-CY42435 Security fixes in amazon-cloudwatch-agent 1.300071.0-r1

Package amazon-cloudwatch-agent version 1.300071.0-r1 fixes 36 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cassandra-reaper, nrjmx, zipkin, thingsboard, cloudwatch-exporter, opensearch, akhq, druid, sonarqube, kserve-modelmesh, apicurio-registry, logstash...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cassandra-reaper, nrjmx, zipkin, thingsboard, cloudwatch-exporter, opensearch, akhq, druid, sonarqube, kserve-modelmesh, apicurio-registry, logstash...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: vault, prometheus, promxy, pulumi, promxy-fips, amazon-cloudwatch-agent-operator, amazon-cloudwatch-agent-operator-fips...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: grafana-alloy, amazon-cloudwatch-agent, splunk-otel-collector, jitsucom-bulker, cluster-api-aws-controller, opentelemetry-collector-contrib, sqlexporter, argo-events, bento...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, grafana-alloy, amazon-cloudwatch-agent, opentelemetry-collector, nats, splunk-otel-collector, opentelemetry-collector-contrib, k8sgpt, argo-workflows, argo-rollouts, kargo...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, tempo, fluent-bit-plugin-loki, node-problem-detector, minio, opentelemetry-collector, istio, prometheus-pushgateway, metrics-server, trillian, certificate-transparency, jaeger, loki, mc, amazon-cloudwatch-agent-operator, minio-operator, grafana,...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: pulumi, k3s, rancher-agent, amazon-cloudwatch-agent-operator, promxy, kubevela...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, amazon-cloudwatch-agent-operator, promxy...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: undock, libnvidia-container, migrate, kube-logging-operator, nri-f5, kubernetes-dashboard-web, ratify, ini-file, cilium-cli, clickhouse-operator, controller-gen, flux, gcsfuse, docker-cli-buildx, aws-privateca-issuer, nri-apache, rabbitmq-messaging-topology-operator,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-69305

Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...