siras

SIRAS v3.0 是一个现代的安全事件响应自动化模拟框架，旨在以代码形式管理红队演练。您可以执行受控的安全模拟，在真实场景中测试您的事件响应计划。 SIRAS 的主要目标是提供以代码形式进行的红队演练，针对攻击场景生成模拟，并突出显示事件响应计划中可能的失败点。这些测试被称为 Smokers ，每个测试执行真实的安防操作，然后在执行结束后清理所创建的资源。 该系统目前支持 AWS 和 General 提供商，采用模块化架构，可轻松扩展到其他云平台。 工作原理？ 安装 前提条件 Python 3.8+ AWS 凭证（用于 AWS smokers） Docker（可选，用于容器化执行）...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: rancher-machine, terraform-provider-random, telegraf, descheduler, crossplane-provider-azure-authorization, falco-exporter, cert-manager, juicefs-csi-driver, k3s, kubernetes, flux-image-reflector-controller, mesosphere-vsphere-csi, spire-controller-manager,...

CVE-2023-25956

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

EUVD-2023-0810

Malicious code in bioql PyPI...

PT-2023-36264 · Hashicorp · Terraform-Provider-Aws

Name of the Vulnerable Software and Affected Versions: terraform-provider-aws affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The terraform-provider-aws package has been rebuilt to incorporate this security...

Apache Airflow AWS Provider Information Disclosure Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow AWS Provider...

GHSA-W695-P3J5-HRJ9 Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

CVE-2023-25956

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

Information disclosure

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

CVE-2023-25956

The CVE-2023-25956 issue is a vulnerability in the Apache Airflow AWS Provider (pre-7.2.1) described as a generation of an error message that contains sensitive information, leading to information disclosure. Multiple connected sources corroborate affected versions (

CVE-2023-25956 Apache Airflow AWS Provider: Arbitrary file read via AWS provider

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

CVE-2023-25956 Apache Airflow AWS Provider: Arbitrary file read via AWS provider

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

HashiCorp Terraform Amazon Web Services provider fixed password generation vulnerability

HashiCorp Terraform Amazon Web Services AWS provider is a program for interacting with AWS supported resources. A security vulnerability exists in the aws/resourceawsiamuserloginprofile.go file in HashiCorp Terraform AWS provider version 1.12.0 and earlier. A remote attacker can exploit this...

CVE-2018-9057

aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...

CVE-2018-9057

aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...