cloud-audit

프로젝트 소개 cloud-audit（클라우드 보안 감사 도우미）는 퍼블릭 클라우드 제공업체의 AK/SK 유출 및 악용을 탐지하는 도구입니다. 정기적으로 클라우드 플랫폼 API를 호출하여 로그를 감사하고, 이상 행동/블랙 특성/베이스라인을 기반으로 의심스러운 침입 행위를 발견합니다. 현재는 Tencent Cloud와 AWS만 지원합니다. 특징 Tencent Cloud 플랫폼의 AK/SK 악용 경고 탐지 지원（이상 행동） AK/SK를 호출하여 명령 생성/실행 모니터링 AK/SK를 호출하여 하위 계정 추가/삭제 모니터링 AK/SK를...

CVE-2023-25911

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...

EUVD-2016-8835

Malware in sbrugna...

EUVD-2006-4297

Malware in sbrugna...

EUVD-2023-26722

Malicious code in bioql PyPI...

EUVD-2023-50990

Malicious code in bioql PyPI...

EUVD-2025-25498

Malicious code in bioql PyPI...

EUVD-2023-29800

Malicious code in bioql PyPI...

EUVD-2025-25499

Malicious code in bioql PyPI...

EUVD-2023-29799

Malicious code in bioql PyPI...

EUVD-2025-13996

Malicious code in bioql PyPI...

CVE-2025-41451

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

CVE-2025-41452

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-41452

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-41451

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

CVE-2025-41452

Danfoss AK-SM8xxA Series before 4.3.1 contains a post-authenticated external control of the system Web interface configuration, with improper handling of exceptional conditions that could cause a DoS. CVSS 6.8 (Network, high attack complexity, high impact on availability). Remediation: update to ...

CVE-2025-41452 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-41452 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-41451 Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

CVE-2025-41451 Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...