PT-2025-48722

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-48715

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-48716

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

com.amazonaws.serverless:aws-serverless-java-container-struts (>=1.9, <=1.9.5), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=4.0.2, <=5.0.6) +77 more potentially affected by CVE-2025-64775 +1 more via org.apache.struts:struts2-core (>=6.0.0, <=6.7.4)

org.apache.struts:struts2-core MAVEN version =6.0.0, =1.9, =4.0.2, =4.0.2, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.4.0, =1.4.1, =1.4.0, =1.4.3 and more Source cves: CVE-2025-64775, CVE-2025-66675https://vulne...

Download from S3

Download files or entire buckets from S3 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import json import os class ModulePost: """Download files or buckets from S3""" info = "name": "Download from S3", "description": "Download files or entire buckets from S3", "author":...

Enumerate AWS Services

Discover all AWS services in use across the account !/usr/bin/env python3 -- coding: utf-8 -- """ AWS Services Enumeration Module Author: KittySploit Team Version: 1.0.0 This module discovers all AWS services in use and provides a comprehensive overview. """ from kittysploit import import json fr...

Upload to S3

Upload files or directories to S3 buckets !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import json import os class ModulePost: info = "name": "Upload to S3", "description": "Upload files or directories to S3 buckets", "author": "KittySploit Team", "tags": "aws", "s3",...

PT-2025-48726

Impact CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset sectio...

CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

EUVD-2025-199886

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715: Improper Access Control

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

ROS-20251128-03

A vulnerability in the Vault access control system and Vault enterprise information archiving platform Enterprise is related to authentication bypass using an alternate path or channel in AWS authentication method. AWS authentication method. Exploitation of the vulnerability could allow an attack...

Ubuntu: Security Advisory (USN-7889-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@neptune.digital/sentry-netlify-v2 (1.2.1) potentially affected by CVE-2025-65944 via @sentry/aws-serverless (10.19.0)

@sentry/aws-serverless NPM version 10.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/aws-serverless and may be impacted: - @neptune.digital/sentry-netlify-v2 1.2.1 Source cves: CVE-2025-65944 Source advisory: MEND:CVE-2025-65944...

@neptune.digital/sentry-netlify-v2 (1.2.1) potentially affected by CVE-2025-65944 via @sentry/aws-serverless (10.19.0)

@sentry/aws-serverless NPM version 10.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/aws-serverless and may be impacted: - @neptune.digital/sentry-netlify-v2 1.2.1 Source cves: CVE-2025-65944 Source advisory: GHSA-6465-JGVQ-JHGP...

@neptune.digital/sentry-netlify-v2 (1.2.1) potentially affected by CVE-2025-65944 via @sentry/aws-serverless (10.19.0)

@sentry/aws-serverless NPM version 10.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/aws-serverless and may be impacted: - @neptune.digital/sentry-netlify-v2 1.2.1 Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...

CVE-2025-22105 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...

CVE-2025-23130 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...

CVE-2025-13524: Improper Resource Shutdown or Release

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...