apche-struts-vuln-demo-cve-2018-11776

Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: aws cloudformation create-stack \ --template-body...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, cluster-api, victoriametrics-cluster, nri-kubernetes, datadog-agent, osv-scanner, nova, kubernetes-event-exporter, src, pulumi-language-java, redpanda, kubescape-operator, containerd, cloud-provider-aws,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-source-controller, datadog-agent, terraform-provider-azapi, osv-scanner, cosign, src, ko, pulumi-language-java, wolfictl, containerd, cloud-provider-aws, teleport, hcloud, scorecard, gitlab-pages, zarf, buildah, falco-no-driver, pulumi-kubernetes-operator, minio...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, dockerize, rabbitmq-messaging-topology-operator, osv-scanner, cosign, kubernetes-event-exporter, src, lvm-driver, kor, lazygit, kubescape-operator, spire-controller-manager, cloud-provider-vsphere, rancher-loglevel, cloud-provider-aws...

CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Cloud One - Workload Security Log4Shell This repo contains a q...

How to Deploy FLR Relay Proxy

Deprecated Feature The FLR Relay Proxy feature described in this article was deprecated in Veeam Plug-In for AWS 7. In deployments where the feature was enabled before upgrading to Veeam Plug-In for AWS 7, the FLR Relay tab will still appear in the options. However, for Veeam Plug-In for AWS 7...

CVE-2017-9450

The Amazon Web Services AWS CloudFormation bootstrap tools package aka aws-cfn-bootstrap before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory...

Important: aws-cfn-bootstrap

Issue Overview: The default umask value is set to 022 to address a privilege escalation security vulnerability. Affected Packages: aws-cfn-bootstrap Issue Correction: Run yum update aws-cfn-bootstrap or yum update --advisory ALAS-2017-895 to update your system. 1. Run yum update aws-cfn-bootstrap...

Important: aws-cfn-bootstrap

Issue Overview: New optional parameter "umask" introduced into cfn-hup.conf file in order to configure the cfn-hup daemon's umask. The Amazon Web Services AWS CloudFormation bootstrap tools package aka aws-cfn-bootstrap before 1.4-19.10 allows local users to execute arbitrary code with root...