CVE-2026-44578

CVE-2026-44578 — SSRF через обновление WebSocket в Next.js Подделка серверного запроса SSRF до аутентификации в самостоятельно размещённых развёртываниях Next.js. Один специально сформированный HTTP-запрос извлекает учётные данные AWS, секреты и данные внутренних сервисов с localhost:80...

checkov

...

slurp-1

slurp Blackbox/whitebox перечислитель S3-корзин Обзор Благодарность всем пакетам вендоров, которые сделали этот инструмент возможным. Это инструмент безопасности; он предназначен для пентестеров и специалистов по безопасности для проведения аудита S3-корзин. Возможности Сканирование по доменуам;...

festin

FestIN — мощный инструмент для поиска S3-корзин и обнаружения контента Что такое FestIn Почему Festin Установка Использование Python Использование Docker Все параметры Использование Настройка доменов для поиска Параллельность Настройка HTTP-сканирования Управление результатами Использование прокс...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

CVE-2026-79916

MaxKB is an open-source enterprise AI assistant. Prior to 2.10.5-lts , authenticated workspace members can inject control characters into the AWS Bedrock access_key_id and secret_access_key fields. The _update_aws_credentials function writes these values to /root/.aws/credentials without safe par...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

cred_scanner

credscanner Простой инструмент командной строки для поиска учетных данных AWS в файлах. Оптимизирован для использования с Jenkins и другими CI-системами. Подозреваю, что существуют другие, более эффективные инструменты например, git-secrets, но я не смог найти ничего, что позволяло бы быстро и...

CVE-2026-54356

CVE-2026-54356 — Budibase: 인증된 사용자의 임의 S3 서명 업로드 URL 발급 게시된 Budibase 작업공간의 낮은 권한BASIC 역할 인증 사용자는 POST /api/attachments/:datasourceId/url을 호출하여, 공격자가 제어하는 객체 키그리고 데이터소스에 고정 버킷이 없는 경우 공격자가 제어하는 버킷까지에 대해 작업공간 데이터소스의 서버 측 AWS 자격 증명 으로 서명된 S3 사전 서명 업로드 URL 을 얻을 수 있습니다...

cve-2013-4660_PoC

Docker 构建 构建为具有漏洞环境的 Docker 环境。 docker build -f cve-2013-4660 -t cve-2013-4660 . 为了演示攻击成功时服务器内部敏感信息如何泄露，注入虚拟数据库和虚拟数据库密码以及 AWS 密钥后运行容器。 sudo docker run -d --name yaml-lab -e DBPASSWORD="SuperSecretPassword123!" -e AWSACCESSKEYID="AKIAIOSFODNN7EXAMPLE" cve-2013-4660-test 将 PoC.yaml 文件复制到 Docker 容器内...

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate a...

GHSA-76G3-C3X4-CRVX Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Problem Scrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default. A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS...

CVE-2026-84366

Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta"issecure" is...

PT-2026-84504

Name of the Vulnerable Software and Affected Versions Scrapy versions prior to 2.17.0 Description The S3DownloadHandler in scrapy/core/downloader/handlers/s3.py converts S3-scheme bucket and key requests into plaintext HTTP requests unless the is secure variable in request.meta is explicitly...

ANT-2026-W77T9B29 · supabase/postgres · other

other medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-W77T9B29: CI downloads unverified binary then assumes production AWS role The qemu-image-build GitHub Actions...

Malicious code in @servicetitan/measure-sheet-data (npm)

npm/@servicetitan/measure-sheet-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized an...

MAL-2026-11720 Malicious code in @or-sdk/pgsql (npm)

npm/@or-sdk/pgsql is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

CVE-2026-58139

Affected software: DuckDB AWS extension for DuckDB. Vulnerability: security policy bypass that lets any database user with SQL execution retrieve plaintext AWS credentials by calling load_aws_credentials with redact_secret=false, bypassing the database-wide allow_unredacted_secrets=false policy. ...

Malicious code in simple-probe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...