vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

slot2

slot2 slot2: a two-stage UEFI GRUB2 bootkit that persists a pre-OS networked implant on Amazon Linux 2023 on AWS EC2 UEFI x8664. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Summary slot2 is a bootkit for Amazon Linux 2023 on EC2. The AWS EC2 UEFI firmware load...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3365)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3365 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directl...

Amazon Linux 2 : kernel (ALAS-2026-4065)

The version of kernel installed on the remote host is prior to 4.14.355-287.758. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4065 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace perio...

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-3356)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3356 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2 : thunderbird (ALAS-2026-4057)

The version of thunderbird installed on the remote host is prior to 153.5.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4057 advisory. Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefo...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-3355)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3355 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...

Medium: nerdctl

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: cni-plugins

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2026-4049)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300073.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4049 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Medium: runfinch-finch

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golang-github-cpuguy83-go-md2man

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golang-github-burntsushi-toml-test

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : golist (ALAS-2026-4064)

The version of golist installed on the remote host is prior to 0.10.1-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4064 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go'...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-131)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-131 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Amazon Linux 2 : oci-add-hooks (ALASNITRO-ENCLAVES-2026-132)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-132 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specif...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-153)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-153 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificat...