CVE-2025-49844-discovery

ElastiCache Redis/Valkey 网络分析工具 用于审计 AWS ElastiCache Redis 和 Valkey 集群网络暴露情况的脚本。 前提条件 已配置相应凭证的 AWS CLI 已安装 jq：brew install jq 脚本 list-elasticache-clusters.sh 列出指定区域内的所有 Redis/Valkey 集群。 root@kitploit: ./list-elasticache-clusters.sh check-elasticache-network.sh 分析单个 AWS 账户中 Redis/Valkey 集群的网络配置。...

CVE-2026-14265

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a...

redis,valkey -- {redis,valkey}-check-aof may lead to stack overflow and potential RCE

Simcha Kosman & CyberArk Labs reports: A user can run the redis,valkeyu-check-aof cli and pass a long file path to trigger a stack buffer overflow, which may potentially lead to remote code execution...