523 matches found
threatest
Threatest Threatest 是一个用于端到端测试威胁检测的 CLI 和 Go 框架。 Threatest 允许你 引爆 一种攻击技术，并验证预期告警已在您最喜欢的安全平台中生成。 阅读公告博客文章：https://securitylabs.datadoghq.com/articles/threatest-end-to-end-testing-threat-detection/ 概念 引爆器 引爆器 描述了攻击技术的执行方式和位置。 支持的引爆器： 本地命令执行 SSH 命令执行 Stratus Red Team AWS CLI 引爆器 AWS 引爆器（仅编程方式，不能与 CL...
stratus-red-team
Stratus Red Team Stratus Red Team es "Atomic Red Team™" para la nube, que proporciona una emulación granular y autónoma de técnicas de ataque ofensivas...
security-labs-pocs
Investigación de Datadog Security Labs y Código de Prueba de Concepto Este repositorio contiene información, exploits, muestras de malware y scripts de Datadog Security Labs. Objetivo Este repositorio tiene como objetivo proporcionar exploits de prueba de concepto, muestras de malware y...
CVE-2026-53495 vulnerabilities
Vulnerabilities for packages: kubescape-server, amazon-ecs-agent, kaniko, wolfictl, helm-operator, syft-fips, kaniko-fips, kube-mgmt-fips, docker-compose, k8sgpt, consul-k8s, helm-set-status, chainctl-fips, zarf-fips, cg, headlamp, helm-mapkubeapis, docker-fips, neuvector-fips, kube-arangodb-fips...
GHSA-7JXH-36Q5-GCQV vulnerabilities
Vulnerabilities for packages: kubescape-server, amazon-ecs-agent, kaniko, wolfictl, helm-operator, syft-fips, kaniko-fips, kube-mgmt-fips, docker-compose, k8sgpt, consul-k8s, helm-set-status, chainctl-fips, zarf-fips, cg, headlamp, helm-mapkubeapis, docker-fips, neuvector-fips, kube-arangodb-fips...
dirtypipe-container-breakout-poc
Escape de contenedor Dirty Pipe Movido a https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2026-15925 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: airflow, mlrun-fips, mlrun, datadog-agent-fips, datadog-agent, keep, keep-fips...
CVE-2026-15925 vulnerabilities
Vulnerabilities for packages: airflow, mlrun-fips, mlrun, datadog-agent-fips, datadog-agent, keep, keep-fips...
GHSA-GPWF-4H98-V82Q datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS
Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...
EUVD-2026-67829
dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cert-manager, kuma, kubernetes-csi-external-health-monitor, kubernetes-csi-external-provisioner, openfga, emissary, spicedb-operator, cilium, kyverno-notation-aws, pulumi-kubernetes-operator, cloud-provider-aws, cluster-api-aws-controller, descheduler,...
GO-2026-6006 vulnerabilities
Vulnerabilities for packages: gitlab-operator, tigera-operator-fips, datadog-agent-fips, datadog-agent, tigera-operator, gitlab-operator-fips...
GO-2026-6005 vulnerabilities
Vulnerabilities for packages: gitlab-operator, tigera-operator-fips, datadog-agent-fips, datadog-agent, tigera-operator, gitlab-operator-fips...
GO-2026-6003 vulnerabilities
Vulnerabilities for packages: gitlab-operator, tigera-operator-fips, datadog-agent-fips, datadog-agent, tigera-operator, gitlab-operator-fips...
GO-2026-6008 vulnerabilities
Vulnerabilities for packages: gitlab-operator, tigera-operator-fips, datadog-agent-fips, datadog-agent, tigera-operator, gitlab-operator-fips...
GO-2026-4569 vulnerabilities
Vulnerabilities for packages: opencost, jaeger, flux-operator, gptscript, github-mcp-server, gitlab-workhorse-ce-fips, datadog-agent-fips, datadog-agent, opencost-fips, ferretdb, jaeger-fips, gitlab-workhorse-ce, osv-scanner, flux-operator-fips...