536 matches found
stratus-red-team
Stratus Red Team Stratus Red Team is "Atomic Red Team™" for the cloud, providing granular and self-contained emulation of offensive attack techniques...
threatest
Threatest Threatest es una CLI y un framework en Go para probar la detección de amenazas de extremo a extremo. Threatest te permite detonar una técnica de ataque y verificar que se haya generado la alerta esperada en tu plataforma de seguridad favorita. Lee el anuncio en el blog:...
security-labs-pocs
Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...
dirtypipe-container-breakout-poc
Escape de contenedor Dirty Pipe Movido a https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...
CVE-2026-50275
The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtracedeserializebaggage in ext/distributedtracingheaders.c parses incoming W3C baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES. A remote...
CVE-2026-50277
dd-trace-cpp (Datadog's C++ distributed tracing library) prior to 2.1.0 parses incoming W3C baggage headers on the extraction path without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES limits, even though those limits are applied during injection. A remote unauthenticated att...
EUVD-2026-82416
The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtracedeserializebaggage in ext/distributedtracingheaders.c parses incoming W3C baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES. A remote...
CVE-2026-50275 Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS
The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtracedeserializebaggage in ext/distributedtracingheaders.c parses incoming W3C baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES. A remote...
CVE-2026-50275 Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS
The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtracedeserializebaggage in ext/distributedtracingheaders.c parses incoming W3C baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES. A remote...
CVE-2026-50275
Datadog PHP Tracer prior to 1.19.2 contains a denial-of-service vulnerability in ddtrace_deserialize_baggage (ext/distributed_tracing_headers.c). The function parses incoming W3C baggage HTTP headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES, allowing a remote una...
GHSA-WF93-45JW-7689 vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2026-8643 vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2026-50276 dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS
dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can...
EUVD-2026-77670
dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can sen...
CVE-2026-50270 dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can sen...
CVE-2026-50270
dd-trace-java (Datadog APM client for Java) versions prior to 1.62.0 are vulnerable to a remote Denial of Service due to improper parsing of W3C baggage headers. The extraction path in BaggagePropagator.java allocates a hash-map entry for each comma-separated key-value pair without enforcing DD_T...
GHSA-7JXH-36Q5-GCQV vulnerabilities
Vulnerabilities for packages: helm-operator, syft-fips, consul-k8s-fips, steampipe, docker-cli-buildx-fips, helm-mapkubeapis, docker-compose, helm-exporter, kube-mgmt, trivy-operator-fips, amazon-ecs-agent, cloudbeat, k8ssandra-client, chainctl-fips, nerdctl, kubescape-operator-fips,...
CVE-2026-53495 vulnerabilities
Vulnerabilities for packages: helm-operator, syft-fips, consul-k8s-fips, steampipe, docker-cli-buildx-fips, helm-mapkubeapis, docker-compose, helm-exporter, kube-mgmt, trivy-operator-fips, amazon-ecs-agent, cloudbeat, k8ssandra-client, chainctl-fips, nerdctl, kubescape-operator-fips,...