597 matches found
CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks
Cybersecurity agencies from Australia, Canada, New Zealand, and the United States have published a joint advisory about the risks associated with a technique called fast flux that has been adopted by threat actors to obscure a command-and-control C2 channel. "'Fast flux' is a technique used to...
NSA and Global Allies Declare Fast Flux a National Security Threat
NSA and global cybersecurity agencies warn fast flux DNS tactic is a growing national security threat used in phishing, botnets, and ransomware...
NSA, CISA, FBI, and International Partners Release Cybersecurity Advisory on “Fast Flux,” a National Security Threat
Today, CISA—in partnership with the National Security Agency NSA, Federal Bureau of Investigation FBI, Australian Signals Directorate’s Australian Cyber Security Centre ASD’s ACSC, Canadian Centre for Cyber Security CCCS, and New Zealand’s National Cyber Security Centre NCSC-NZ—released joint...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: kaniko, spegel, kargo, kots, kubescape, melange, linkerd2, syft, flux-helm-controller, zot, flux-source-controller, docker, cilium-cli, helm, k8sgpt, osv-scanner, nerdctl, ctop, dagger, grype, xeol, buildkitd, opa, rancher-fleet, neuvector-scanner, k8ssandra-client,...
CVE-2024-40635 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, docker-cli-buildx-fips, opa, spegel, syft, rancher, consul-k8s-fips, helm-operator, buildkitd-fips, helm-operator-fips, rancher-fleet, skaffold, helm-push, neuvector-scanner-fips, flux-source-controller, xeol-fips, zarf, trivy-fips,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, docker-cli-buildx-fips, opa, spegel, syft, rancher, consul-k8s-fips, helm-operator, buildkitd-fips, helm-operator-fips, rancher-fleet, skaffold, helm-push, neuvector-scanner-fips, flux-source-controller, xeol-fips, zarf, trivy-fips,...
GHSA-QXP5-GWG8-XV66 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, harbor-registry-fips, crossplane-provider-keycloak-fips, postgres-operator-fips, dagdotdev, nginx-prometheus-exporter-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, wave, kubernetes-dashboard-auth-fips, argo-events,...
Malicious code in flux-common-plugin (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1810 Malicious code in flux-common-plugin (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: go-licenses, trino, podman, paranoia, wireguard-go, git-credential-oauth, gitsign, aws-flb-cloudwatch, swagger, terraform-docs, wuzz, k8s-device-plugin, trillian, cadvisor, gostatsd, extism, git-lfs, lvm-driver, cloud-provider-aws, rancher-loglevel,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: s5cmd, aws-flb-cloudwatch, timoni, cortex, nri-nagios, vt-cli, kubebuilder, newrelic-fluent-bit-output, cni-plugins, helm-operator, kube-logging-logging-operator, nri-memcached, bank-vaults-fips, helm-operator-fips, skaffold, wire-go, kubernetes-event-exporter, mage,...
CVE-2022-36035
Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...
CVE-2022-24878
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to cause a Denial of Service at the controller level. Workarounds include automated tooling in the user's CI/CD pipeline to...
CVE-2022-24877
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...
CVE-2024-45799
FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/buyers list pages and shop names, that are currently not sanitized. This allows executing arbitrary javascript code on the user's browser just by visiting the shop pages. As a...
Malicious code in flux-example-chat (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25c56a7bd2b361d914ee94cd9ec12e8fe10e84358352b4cab6490131e216dbad Any computer that has this package installed or running should be considered...
MAL-2025-707 Malicious code in flux-example-chat (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25c56a7bd2b361d914ee94cd9ec12e8fe10e84358352b4cab6490131e216dbad Any computer that has this package installed or running should be considered...
CVE-2024-56138 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, kyverno-notation-aws, kyverno, kyverno-notation-aws-fips, flux, flux-source-controller...