Lucene search
+L

476 matches found

Kitploit
Kitploit
added 2026/09/17 11:42 p.m.14 views

aws-key-disabler

AWS Lambda - IAM 액세스 키 비활성화기 AWS 키 비활성화기는 설정된 시간 이후에 AWS IAM 사용자 액세스 키를 비활성화하는 Lambda 함수로, 오래된 액세스 키와 관련된 위험을 줄이기 위한 것입니다. AWS Lambda 아키텍처 최종 사용자를 위한 SysOps 출력 개발자 툴체인 현재 제한 사항 스캔 결과JSON가 포함된 보고서는 단일 정의된 시스템 관리자 계정으로 전송됩니다. 빌드 구성 파일 /grunt/package.json의 reportto 속성을 참조하세요. 키는 비활성화만 되며, 삭제되거나 교체되지...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:54 p.m.10 views

CVE-2026-22008-AWS-Lambda-Layer-Injection-via-Shared-Layer-ARN

CVE-2026-22008 – Inyección de capa de AWS Lambda mediante ARN de capa compartido Código del programa Python root@kitploit: deployvulnerablelambda.py - Lambda function using a layer from untrusted account import boto3 lambdaclient = boto3.client'lambda' Attacker publishes a public layer containing...

3.7CVSS6.6AI score0.00206EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 12:00 a.m.13 views

CVE

Control Tower Notification Enabler Este paquete cdk instala una función Lambda, con un rol IAM asociado, y suscribe la función Lambda a las notificaciones de seguridad agregadas de Control Tower. En caso de una violación de una regla de Control Tower por ejemplo, un bucket S3 de acceso público, l...

6.2AI score
SaveExploits0
NVD
NVD
added 2026/09/13 11:17 a.m.8 views

CVE-2026-90513

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS0.00439EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 10:46 a.m.7 views

DVFaaS-Damn-Vulnerable-Functions-as-a-Service

DVFaaS - Funciones Damn Vulnerables como Servicio Un proyecto DHIY Despliega y Hackéalo Tú Mismo en el que puedes desplegar y ejecutar un montón de funciones terriblemente inseguras en AWS Lambda Objetivo y audiencias En we45 hacemos mucha formación sobre seguridad en Serverless, Cloud y la...

5.9AI score
SaveExploits0
Cvelist
Cvelist
added 2026/09/13 10:45 a.m.37 views

CVE-2026-90513 simalexan api-lambda-send-email-ses API Gateway Endpoint template.yml SES.sendEmail missing authentication

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS0.00439EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/13 10:45 a.m.13 views

CVE-2026-90513

CVE-2026-90513 affects simalexan api-lambda-send-email-ses (up to commit bda6869aa81371d1e872242e74fe7d953edb818d ). The flaw resides in the SES.sendEmail function within the API Gateway Endpoint component (file template.yml ), where a missing authentication mechanism allows remote manipulation o...

6.9CVSS6.1AI score0.00439EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/13 10:45 a.m.7 views

EUVD-2026-76985

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS6.1AI score0.00439EPSS
SaveExploits0References6
Chainguard
Chainguard
added 2026/09/05 8:58 p.m.20 views

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, librechat, tileserver-gl, lambda-nodejs, langfuse, langfuse-fips...

5.7AI score
SaveExploits0
Chainguard
Chainguard
added 2026/09/05 8:58 p.m.18 views

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, librechat, tileserver-gl, lambda-nodejs, langfuse, langfuse-fips...

8.7CVSS5.8AI score0.00278EPSS
SaveExploits0
NVD
NVD
added 2026/08/31 4:19 p.m.16 views

CVE-2026-82802

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handler.js of the component granules Endpoint. Executing a manipulation of the argument openSearchOsdd can lead to...

6.9CVSS0.00286EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/31 3:15 p.m.6 views

EUVD-2026-68607

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handler.js of the component granules Endpoint. Executing a manipulation of the argument openSearchOsdd can lead to...

6.9CVSS5.7AI score0.00286EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability in pillow

In Pillow’s PIL.ImageMath.eval before version 9.0.0, it was possible to evaluate arbitrary expressions, including those that used the Python exec method. A lambda expression could also be used...

9.8CVSS6.8AI score0.03334EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/21 9:17 p.m.27 views

CVE-2026-77415

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformExpression, expose and deconstruct...

9.3CVSS0.00645EPSS
SaveExploits0References11
NVD
NVD
added 2026/08/21 8:16 p.m.13 views

CVE-2026-77810

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

9.9CVSS0.00347EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 7:34 p.m.87 views

CVE-2026-77810

CVE-2026-77810 is a code injection vulnerability in the Neptune connector of aws-athena-query-federation , caused by a Gremlin query passthrough . A user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying compute for the connector, result...

9.9CVSS5.4AI score0.00347EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/21 7:34 p.m.39 views

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

9.4CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/21 7:34 p.m.23 views

EUVD-2026-64067

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

9.9CVSS5.4AI score0.00347EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/21 7:34 p.m.36 views

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

9.9CVSS0.00347EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.25 views

PT-2026-79440

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

9.9CVSS5.3AI score0.00347EPSS
SaveExploits0References5
Rows per page
Query Builder