amira

AMIRA: Resposta e Análise Automatizada de Incidentes de Malware AMIRA é um serviço para executar automaticamente a análise nos arquivos de saída do OSXCollector. A análise automatizada é realizada através do OSXCollector Output Filters, em particular O Filtro Único para Governá-los a Todos : o...

turbolite

turbolite turbolite ist ein SQLite-VFS in Rust, das Punktabfragen und Joins direkt von S3 mit einer Kaltstartlatenz von unter 250 ms ausführt. Dieses Repository ist ein Cargo-Workspace mit zwei Crates: turbolite – Reine Rust-Bibliothek. SQLite-VFS mit Seitenkomprimierung, Verschlüsselung und...

nuclearpond

Nuclear Pond Nuclear Pond é usado para aproveitar o Nuclei na nuvem com velocidade notável, flexibilidade e realizar varreduras em toda a internet por muito menos que uma xícara de café. Ele usa AWS Lambda como backend para invocar varreduras Nuclei em paralelo, com a opção de armazenar resultado...

karton

Karton Verteiltes Malware-Verarbeitungsframework basierend auf Python, Redis und S3. Die Idee Karton ist ein robustes Framework zum Erstellen flexibler und leichter Malware-Analyse-Backends. Es kann verwendet werden, um Malware-Analysesysteme mit sehr geringem Aufwand zu einer robusten Pipeline z...

nuclearpond-OFJAAAH

न्यूक्लियर पॉन्ड V.2 हमने इस प्रोजेक्ट को फोर्क किया है ताकि हम इस महान विचार को जारी रख सकें, मुझे उम्मीद है कि हम साथ मिलकर कोड को बेहतर कर सकते हैं और इसे सभी के लिए उपलब्ध करा सकते हैं - @OFJAAAH Nuclear Pond को इंस्टॉल करने के लिए, आपको बैकएंड terraform module को कॉन्फ़िगर करना होगा। आप...

CVE-2026-48035 Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation could ship an AWS account whose CloudTrail / Config audit logs were deletable by any S3-delete-capable principal — while...

Malicious Package

Overview @cloudplatform-single-spa/svp-s3-storage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizati...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the UploadAllFiles function during S3 restore operations when processing tar headers from a supplied backup archive. An attacker can cause the daemon to crash and disrupt the contr...

CVE-2026-28377

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to williamgoodfellow for reporting this vulnerability...

Unspecified Vulnerability in StudioCMS (CNVD-2026-18150)

StudioCMS is StudioCMS open source a content management system . A security vulnerability exists in StudioCMS that can be exploited by an attacker to cause an authenticated user to perform arbitrary file operations on S3 storage buckets...

GHSA-MM78-FGQ8-6PGR StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check

Summary The S3 storage manager's isAuthorized function is declared async returns Promise but is called without await in both the POST and PUT handlers. Since a Promise object is always truthy in JavaScript, !isAuthorizedtype always evaluates to false, completely bypassing the authorization check...

CVE-2026-32101 StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized function is declared async returns Promise but is called without await in both the POST and PUT handlers. Since a Promise object is always truthy in...

CVE-2026-32101

CVE-2026-32101 affects StudioCMS S3 Storage Manager prior to version 0.3.1. The isAuthorized() function is async but is called without await in both the POST and PUT handlers, causing the authorization check to always evaluate to bypass due to Promise objects being truthy. As a result, any authen...

AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue

Summary S3 Encryption Client for PHP is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders...

[SECURITY] Fedora 43 Update: rclone-1.72.0-1.fc43

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

EUVD-2023-0392

Malicious code in bioql PyPI...

EUVD-2023-26855

Malicious code in bioql PyPI...

EUVD-2024-3195

Malicious code in bioql PyPI...

EUVD-2025-12479

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-51651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix...