terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

sisu

sisu ⚡ Tu AWS, como un sistema de archivos. Esto: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json En lugar de esto: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

AWS-Threat-Simulation-and-Detection

Detección de Amenazas en AWS con Stratus Red Team Este repositorio es una documentación de mis aventuras con Stratus Red Team, una herramienta de emulación de adversarios para la nube. Stratus Red Team es el "Atomic Red Team para la nube, permitiendo emular técnicas de ataque ofensivas de manera...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-CY42435 Security fixes in amazon-cloudwatch-agent 1.300071.0-r1

Package amazon-cloudwatch-agent version 1.300071.0-r1 fixes 36 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: zipkin, cloudwatch-exporter, kserve-modelmesh, nrjmx, wavefront-proxy, thingsboard, apicurio-registry, druid, akhq, opensearch, sonarqube, cassandra-reaper, logstash...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: zipkin, cloudwatch-exporter, kserve-modelmesh, nrjmx, wavefront-proxy, thingsboard, apicurio-registry, druid, akhq, opensearch, sonarqube, cassandra-reaper, logstash...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, amazon-cloudwatch-agent-operator, promxy, promxy-fips, prometheus, pulumi, vault...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: trillian, opentelemetry-collector, datadog-agent, certificate-transparency, loki, jaeger, prometheus-pushgateway, splunk-otel-collector, karma, minio, k8sgpt, aws-otel-collector, fluent-bit-plugin-loki, istio, prometheus-operator, amazon-cloudwatch-agent-operator,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, sqlexporter, splunk-otel-collector, argo-events, cluster-api-aws-controller, bento, amazon-cloudwatch-agent, opentelemetry-collector-contrib, grafana-alloy...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, splunk-otel-collector, kargo, nats, argo-workflows, kubeflow-pipelines, argo-rollouts, amazon-cloudwatch-agent, k8sgpt, opentelemetry-collector-contrib, grafana-alloy...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: rancher-agent, k3s, amazon-cloudwatch-agent-operator, pulumi, promxy, kubevela...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, pulumi, promxy...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: eksctl, zot, grafana-rollout-operator, containerd, kubernetes-dashboard, bom, k8sgateway, kubernetes-dashboard-api, delve, dive, harbor-cli, controller-gen, cerbos, prometheus-operator, spire-controller-manager, nginx-prometheus-exporter,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-69305

Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...