CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106032

The Amazon Bedrock AgentCore Starter Toolkit is vulnerable to Server-Side Request Forgery (SSRF) and local file read in versions prior to 0.3.14 . The root cause is unrestricted external OpenAPI reference resolution during the processing of the agent import functionality. An authenticated remote ...

CVE-2026-106032 Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrar...

CVE-2026-105811

The QnABot on AWS (versions 7.0.0 through 7.4.5) contains an authorization bypass vulnerability in the optional Amazon Q Business Lambda hook sample (q-business-lambda-hook). This issue stems from a user-controlled key and could allow an authenticated remote user to read arbitrary Amazon S3 objec...

CVE-2026-105811 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

CVE-2026-105811 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

EUVD-2026-93985

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

CVE-2026-105811 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

CVE-2026-11417-AWS-CDK-RCE

AWS CDK NodejsFunction의 공급망 명령 주입 취약점 CVE-2026-11417 작성자: Hesham Ashraf @HeshamASH 날짜: 2026년 6월 10일 심각도: 높음 CVSSv3.1: 7.3, CVSSv4: 7.0 CWE: CWE-78 — OS 명령에 사용되는 특수 요소의 부적절한 중화 OS 명령 주입 영향을 받는 패키지: aws-cdk-lib npm, 2.245.0 이전의 모든 버전 공급업체: Amazon Web Services AWS 상태: 패치됨 PR 37292, PR 37412 | CVE:...

PT-2026-107278

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.54.6 Description Cloud storage catalog providers do not sufficiently validate object paths. A principal with permissions to create or rename objects in a configured AWS S3 or Azure Blob Storage catalog source can...

PT-2026-107237

Name of the Vulnerable Software and Affected Versions QnABot on AWS versions 7.0.0 through 7.4.5 Description An authorization bypass exists in the optional Amazon Q Business Lambda hook sample. This issue occurs due to a user-controlled key, which may allow an authenticated remote user to read...

siras

SIRAS v3.0 은 보안 사고 대응 훈련을 코드로 관리하도록 설계된 현대적인 보안 사고 대응 자동 시뮬레이션 프레임워크입니다. 제어된 보안 시뮬레이션을 실행하여 현실적인 시나리오에서 사고 대응 계획을 테스트할 수 있습니다. SIRAS 의 주요 목표는 레드 팀 훈련을 코드로 제공하여 공격 시나리오에 대한 시뮬레이션을 생성하고 사고 대응 계획의 잠재적 실패를 강조하는 것입니다. 테스트는 Smokers 라고 하며, 각각 실제 보안 작업을 실행한 후 실행 중에 생성된 리소스를 정리합니다. 이 시스템은 현재 AWS 및 General...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform 취약한 앱과 CVE-2021-44228에 대응하는 JNDIExploit을 배포하기 위한 Terraform입니다. 스택 정보 이 Terraform은 AWS Cloud의 VPC에 두 개의 인스턴스를 생성합니다. AWSACCESSKEYID 와 AWSSECRETACCESSKEY 를 내보내기export만 하면 됩니다. 하나의 인스턴스는 JNDIExploit입니다. 두 번째는 log4j 익스플로잇을 위한 Vulnerable-App입니다. 적용apply하기 ...

CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs 인바운드 메시지 속성 헤더 주입 동일한 Apache Camel 취약점에 대한 실행 가능한 개념 증명PoC 재현 코드로, 런타임별로 하나씩 제공됩니다: 런타임| 디렉터리| 스택| 탈취된 싱크| 입증된 영향 ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| CamelExecCommand를 통한 exec:| 원격 코드 실행 Camel...

CVE-2026-43867

camel-pqc AWS Secrets Manager 키-메타데이터 안전하지 않은 역직렬화 재현기 CVE-2026-43867 이 프로젝트는 Apache Camel의 camel-pqc 컴포넌트에서 Java 역직렬화 취약점 을 시연하며, CVE-2026-43867 로 추적됩니다. AwsSecretsManagerKeyLifecycleManager.deserializeMetadata는 AWS Secrets Manager 시크릿에 저장된 포스트퀀텀 키 메타데이터를 Base64 디코딩한 후, 필터 없는...

enumerate-iam

IAM 権限の列挙 AWS の認証情報を見つけたが、どのような権限を持っているか分からない？ $ ./enumerate-iam.py --access-key AKIA... --secret-key StF0q... 2019-05-10 15:57:58,447 - 21345 - INFO Starting permission enumeration for access-key-id "AKIA..." 2019-05-10 15:58:01,532 - 21345 - INFO Run for the hills, getaccountauthorizationdetail...

waf-fu

waf-fu AWS WAF v2 のログブラウザ兼リプレイヤー。インタラクティブな TUI を備える。CloudWatch、S3、および WAF サンプリング API からログを取得し（SQLite キャッシュ付き）、認証検出と YAML ベースのフィルタリングを備えた分割ペインのターミナル UI に表示し、Firefox、Chrome、または curl を介してヘッダー/クッキー/ボディを完全に再現してリクエストをリプレイする。curl、JSON、HAR へのバッチエクスポートをサポートする。 インストール PyPI から uv pip install waf-fu pipx...

Evaluating Behavioral Context for Interpretable IAM Policy Risk Scoring in Cloud Environments

IAM policy analysis typically emphasizes the authorization capabilities encoded in a policy, but security analyst review priority may also depend on the behavioral and environmental context surrounding a policy event. This paper evaluates whether contextual information provides measurable...

Malicious code in postcss-gap-fallback-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b54d5bd893bc377a77503059998e01ae3e338fd4d8ddac6fe2d7c71a3157cb5 The package is published as a PostCSS gap fallback utility but ships thunderboltRegistry.js, which executes an IIFE on module load. The IIFE runs...