6991 matches found
GHSA-62JJ-GR2R-5C34 vulnerabilities
Vulnerabilities for packages: istio, flannel, prometheus-adapter, nri-nagios, apko, newrelic-infrastructure-agent, podinfo, glow, slsa-verifier, nginx-prometheus-exporter, metallb, fuse-overlayfs-snapshotter, helm, cortex, kubernetes-dashboard-web, paranoia, envoy-gateway, kubebuilder,...
GHSA-6F52-WPX2-HVF2 vulnerabilities
Vulnerabilities for packages: chart-testing, buildkitd, amass, terraform-provider-random, kubernetes-dashboard-api, kafkaexporter, kyverno-policy-reporter-kyverno-plugin-fips, memcached-exporter-fips, rancher-loglevel, volume-modifier-for-k8s, envconsul, sftpgo-plugin-kms, falcosidekick-fips,...
GHSA-62JJ-GR2R-5C34 vulnerabilities
Vulnerabilities for packages: chart-testing, buildkitd, amass, terraform-provider-random, kubernetes-dashboard-api, kafkaexporter, kyverno-policy-reporter-kyverno-plugin-fips, rancher-loglevel, volume-modifier-for-k8s, envconsul, sftpgo-plugin-kms, falcosidekick-fips, nri-kafka,...
FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware
The financially motivated threat actor known as FIN6 has been observed leveraging fake resumes hosted on Amazon Web Services AWS infrastructure to deliver a malware family called Moreeggs. "By posing as job seekers and initiating conversations through platforms like LinkedIn and Indeed, the group...
FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware
The financially motivated threat actor known as FIN6 has been observed leveraging fake resumes hosted on Amazon Web Services AWS infrastructure to deliver a malware family called Moreeggs. "By posing as job seekers and initiating conversations through platforms like LinkedIn and Indeed, the group...
Navigating AWS Migration: Achieving Clarity and Confidence
Migrating workloads to Amazon Web Services AWS represents a significant strategic opportunity, enabling greater agility, scalability, and potential for innovation. But undertaking this transition without a comprehensive strategy for visibility and security can introduce unforeseen risks,...
How Google’s Wiz Acquisition Impacts CNAPP
Google aims to stake out a share of the CNAPP market and compete head-on against AWS and Microsoft Azure with its planned Wiz acquisition. What are the implications for companies invested in AWS and Azure cloud infrastructure?...
Navigating AWS Migration: Achieving Clarity and Confidence
Migrating workloads to Amazon Web Services AWS represents a significant strategic opportunity, enabling greater agility, scalability, and potential for innovation. But undertaking this transition without a comprehensive strategy for visibility and security can introduce unforeseen risks,...
CVE-2025-20286 ISE on AWS Static Credential
A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...
CVE-2025-20286: Use of Hard-coded Password
A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...
CVE-2025-5277
aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system...
CVE-2025-5277
aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system...
CVE-2025-5277
CVE-2025-5277 affects the aws-mcp-server MCP server. The vulnerability is a command injection where an attacker can craft a prompt that, when accessed by the MCP client, will cause arbitrary commands to run on the host. The NVD metrics indicate a CRITICAL impact (CVSSv4.0 9.4; CVSSv3.1 9.6) with ...
CVE-2025-5277
aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system...
DaaS-Hosting-Failed to update the master image associated with the provisioning scheme.
While changing Master Image in AWS throwing an error "Failed to update the master image associated with the provisioning scheme." Export of error details: Transaction ID: xxxxxxxxxxxxxxxxx Action Name: MCUpdateMachineCatalog Exception: StudioErrorId : ProvisioningTaskError ErrorCategory :...
PT-2025-23083
Name of the Vulnerable Software and Affected Versions: aws-mcp-server affected versions not specified Description: The issue is related to command injection. An attacker can craft a prompt that, once accessed by the MCP client, will run arbitrary commands on the host system. Recommendations: At t...
CVE-2025-5277: Improper Neutralization of Special Elements used in an OS Command
aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system...
Fedora: Security Advisory (FEDORA-2024-7908ee39a9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-b87003097a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...