apche-struts-vuln-demo-cve-2018-11776

Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: aws cloudformation create-stack \ --template-body...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: tekton-chains, pulumi-language-java, secrets-store-csi-driver, q, kubernetes-event-exporter, dapr, nri-consul, terraform-provider-acme, rancher-fleet, octo-sts, jaeger-operator, cert-manager, croc, kbld, libnvidia-container, paranoia, kaniko, hubble,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, tekton-chains, pulumi-language-java, terraform-provider-acme, cert-manager, chezmoi, opentelemetry-collector, cosign, teleport, trivy, nerdctl, slsa-verifier, prometheus-operator, flux-kustomize-controller, buildkitd,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, vale, secrets-store-csi-driver, postgres-operator, go-licenses, kubernetes-event-exporter, yace, aws-eks-pod-identity-agent, esbuild, dkron, crossplane-provider-aws-cloudformation, local-static-provisioner, octo-sts, minio-operator, croc,...

CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Cloud One - Workload Security Log4Shell This repo contains a q...

br.com.guiabolso:hyperloop-transport (3.0.1), software.amazon.cloudformation:aws-cloudformation-rpdk-java-plugin (2.0.12) potentially affected by CVE-2020-8897 via com.amazonaws:aws-encryption-sdk-java (1.7.0)

com.amazonaws:aws-encryption-sdk-java MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazonaws:aws-encryption-sdk-java and may be impacted: - br.com.guiabolso:hyperloop-transport 3.0.1 -...

How to Deploy FLR Relay Proxy

Deprecated Feature The FLR Relay Proxy feature described in this article was deprecated in Veeam Plug-In for AWS 7. In deployments where the feature was enabled before upgrading to Veeam Plug-In for AWS 7, the FLR Relay tab will still appear in the options. However, for Veeam Plug-In for AWS 7...

CVE-2017-9450

The Amazon Web Services AWS CloudFormation bootstrap tools package aka aws-cfn-bootstrap before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory...

Important: aws-cfn-bootstrap

Issue Overview: The default umask value is set to 022 to address a privilege escalation security vulnerability. Affected Packages: aws-cfn-bootstrap Issue Correction: Run yum update aws-cfn-bootstrap or yum update --advisory ALAS-2017-895 to update your system. 1. Run yum update aws-cfn-bootstrap...

Important: aws-cfn-bootstrap

Issue Overview: New optional parameter "umask" introduced into cfn-hup.conf file in order to configure the cfn-hup daemon's umask. The Amazon Web Services AWS CloudFormation bootstrap tools package aka aws-cfn-bootstrap before 1.4-19.10 allows local users to execute arbitrary code with root...