1106 matches found
coalmine
Cloud Canary Token Verwaltung — Bereitstellung, Überwachung und Rotation von Täuschungsanmeldeinformationen über AWS und GCP zur Erkennung unbefugten Zugriffs. !WARNING Alpha-Version — Coalmine befindet sich in der frühen Entwicklung. Die grundlegende Funktionalität hat derzeit Priorität, und die...
gcp_scanner
Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...
professional-services
Servizi Professionali Soluzioni e strumenti comuni sviluppati dal team Professional Services di Google Cloud. Dichiarazione di non responsabilità Questo repository e i suoi contenuti non sono un prodotto Google supportato ufficialmente. Licenza Tutte le soluzioni all'interno di questo repository...
CloudPentestCheatsheets
CloudPentestCheatsheets Dieses Repository enthält eine Sammlung von Cheatsheets, die ich für Tools zusammengestellt habe, die mit dem Pentesting von Organisationen zu tun haben, die Cloud-Anbieter nutzen. Der Schwerpunkt liegt auf offensiver Cloud-Enumeration und dem schnellen Verständnis einer...
USN-8668-1 linux-gcp-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8668-1: Linux kernel (GCP) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-gcp-fips, velero-plugin-for-gcp, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-microsoft-azure, velero-plugin-for-aws-fips, velero-plugin-for-aws...
USN-8644-2: Linux kernel (GCP) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...
USN-8660-1 linux-gcp, linux-gke vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: k8ssandra-client, crossplane, istio, pulumi-kubernetes-operator, telegraf, cluster-api-aws-controller, azure-service-operator, flux-notification-controller, k3s, kube-metrics-adapter, cass-operator, hubble-ui, spicedb, opentelemetry-operator, flux-helm-controller,...
CVE-2026-15623
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
CVE-2026-15623
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
MAL-2026-14067 Malicious code in upload-to-gcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: conftest, crossplane-provider-aws-cloudformation, pvc-autoresizer, postgres-operator, restic, blobfuse2, s5cmd, vault-k8s, kubeflow-pipelines, nri-couchbase, runc, newrelic-nri-statsd, telegraf, custom-pod-autoscaler, cosign, lvm-driver, rancher-telemetry,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: prometheus-operator, conftest, kubernetes-dashboard-web, timescaledb-tune, terraform, ratify, azure-service-operator, docker-credential-gcr, fzf, kubernetes-csi-driver-hostpath, aactl, aws-otel-collector, k3s, kubernetes-dashboard, nri-redis, ip-masq-agent, dex,...
GHSA-VX5Q-9X62-9QQG vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-WR2H-54M4-VP72 vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-X828-8HM7-W4XW vulnerabilities
Vulnerabilities for packages: linux-gcp...