Ubuntu 24.04 LTS : Google Guest Agent and Google OS Config Agent vulnerability (USN-6746-2)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6746-2 advisory. USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Tenable has...

Ubuntu: Security Advisory (USN-6746-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6746-2: Google Guest Agent and Google OS Config Agent vulnerability

USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacke...

USN-6746-2 google-guest-agent, google-osconfig-agent vulnerability

USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacke...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tflint, terraform, k9s, kots, zarf, tfsec, trivy, wolfictl, terragrunt, grype, snyk-cli, conftest, zot, kubescape...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: k9s, tflint, grype, kubescape, zot, conftest-fips, kots, terragrunt, trivy-fips, tfsec, trivy, terraform, wolfictl, snyk-cli, conftest, zarf...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: k9s, tflint, grype, kubescape, zot, conftest-fips, kots, terragrunt, trivy-fips, tfsec, trivy, terraform, wolfictl, snyk-cli, conftest, zarf...

Malicious code in aws_codedeploy-agent (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5171 Malicious code in gen-agent-fingerprint (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gen-agent-fingerprint (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2885 Malicious code in portm-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in portm-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lifetime-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2610 Malicious code in lifetime-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

CloudBrute - Awesome Cloud Enumerator

A tool to find a company target infrastructure, files, and apps on the top cloud providers Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode. The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike. The complete writeup is available. here Motivation ...

Malicious code in @terraform-aws-github-runner/gh-agent-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2420 Malicious code in @terraform-aws-github-runner/gh-agent-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 275. Vulnerability Details CVEID:CVE-2023-3978 DESCRIPTION: Golang html package is vulnerable to cross-site scripting, caused by improper validation of user-supplied input...

Session Hijacking

silverstripe/framework is vulnerable to Session Hijacking. The vulnerability is due to a malfunction in the security protection designed to detect changes in the User-Agent header, which allows an attacker to modify the header without invalidating the user session...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-647 advisory. 2024-07-17: CVE-2024-30255 was added to this advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a serve...