ptcpdump

ptcpdump %20e2e %20e2e English | 中文 ptcpdumpは、eBPFを搭載したtcpdump互換のパケットアナライザです。検出可能な場合、パケットにプロセス/コンテナ/ポッドのメタデータを自動的に注釈付けします。 jschwinger233/skbdumpに触発されています。 目次 特徴 インストール 要件 使い方 コマンド例 出力例 Dockerでの実行 バックエンド フラグ tcpdumpとの比較 開発 依存関係 ビルド 関連プロジェクト Flownix 特徴 🔍 プロセス/コンテナ/ポッド対応のパケットキャプチャ。 📦...

MAL-2026-14034 Malicious code in notafollower1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c74ec5369dac32115a9f5f257f512fa0a48d2e914b1f18c5178992b0a1604f9 package.json declares a postinstall script that automatically runs on npm install and fetches AWS ECS container task metadata via the...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the OpenAtNoFollow process. An attacker can cause unintended file ownership or permission changes on host files by placing a symlink in the virt-launcher filesystem, which is then followed via...

Malicious code in npm-global-util (npm)

Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...

CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

Authentication Bypass by Spoofing

Overview Affected versions of this package are vulnerable to Authentication Bypass by Spoofing via the findContainerForPID function. An attacker can access sensitive metadata, configuration, and device information of other containers by spoofing process names through the devLXD API endpoints. Not...

CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...