domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-sql, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, crossplane-provider-azure-storage, kubevela, crossplane-provider-azure-authorization, crossplane-provider-aws-rds, crossplane-provider-aws-sns,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-sql, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, crossplane-provider-azure-storage, kubevela, crossplane-provider-azure-authorization, crossplane-provider-aws-rds, crossplane-provider-aws-sns,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-sql, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, crossplane-provider-azure-storage, kubevela, crossplane-provider-azure-authorization, crossplane-provider-aws-rds, crossplane-provider-aws-sns,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-sql, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, crossplane-provider-azure-storage, kubevela, crossplane-provider-azure-authorization, crossplane-provider-aws-rds, crossplane-provider-aws-sns,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-sql, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, crossplane-provider-azure-storage, kubevela, crossplane-provider-azure-authorization, crossplane-provider-aws-rds, crossplane-provider-aws-sns,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-sql, crossplane-provider-aws-route53, crossplane-provider-aws-lambda, crossplane-provider-azure-storage, kubevela, crossplane-provider-azure-authorization, crossplane-provider-aws-rds, crossplane-provider-aws-sns,...

ghostbuster

Índice Índice Ghostbuster El problema Características del proyecto Instalación de Ghostbuster Uso de Ghostbuster Ejemplo de salida Configuración de tus cuentas AWS Configuración de Cloudflare Opcional Autores Licencia Ghostbuster Elimina IPs elásticas colgantes realizando análisis de tus recursos...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cis-operator, azcopy, istio, newrelic-nri-kube-events, cluster-api, harbor-registry, kube-logging-operator-custom-runner, rancher, pulumi-language-java, external-secrets-operator, kuma, skopeo, descheduler, redka, helm, kubescape-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: rancher, scorecard, pulumi-language-java, external-secrets-operator, buildkitd, nuclei, step-kms-plugin, helm, crossplane-provider-aws-lambda, tekton-chains, crossplane-provider-azure-storage, trivy, gh, crossplane-provider-aws-s3, skaffold, witness, kine, atlantis,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kserve-modelmesh-serving, sqlexporter, cluster-api, harbor-registry, kube-logging-operator-custom-runner, rancher, crossplane-provider-aws-lambda, secrets-store-csi-driver-provider-gcp, verticadb-operator, crossplane-provider-aws-s3, azuredisk-csi, libnvidia-containe...

io.micronaut.aws:micronaut-aws-distributed-configuration (>=2.8.0, <=2.8.1), io.micronaut.aws:micronaut-aws-parameter-store (>=2.6.1, <=2.6.2) +10 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.2)

io.micronaut:micronaut-http-client MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-aws-distributed-configuration =2.8.0, =2.6.1, =2.6.1, =2.8.0,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elb-fips, rancher, crossplane-provider-aws-rolesanywhere-fips, elastic-agent-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-lambda, trivy, backup-restore-operator, crossplane-provider-aws-cognitoidp-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elb-fips, rancher, crossplane-provider-aws-rolesanywhere-fips, elastic-agent-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-lambda, trivy, backup-restore-operator, crossplane-provider-aws-cognitoidp-fips,...

Black Hat: Novel DNS Hack Spills Confidential Corp Data

LAS VEGAS – Amazon and Google patched a domain name service DNS bug that allowed attackers to snoop on the confidential networking settings of companies – revealing computer and employee names along with office locations and exposed web resources. The vulnerability, outlined in a Black Hat USA 20...

Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic

Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service DNSaaS providers that could allow attackers to exfiltrate sensitive information from corporate networks. "We found a simple loophole that allowed us to intercept a portion of worldwide dynamic...

resource-agents security update

4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...

DAGOBAH - Open Source Tool To Generate Internal Threat Intelligence, Inventory & Compliance Data From AWS Resources

Dagobah is an open source tool written in python to automate the internal threat intelligence generation, inventory collection and compliance check from different AWS resources. Dagobah collects information and save the state into an elasticsearch index. Dagobah runs into the a LAMBDA and looks a...