security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

security_monkey

NOTA: Security Monkey è in modalità manutenzione e sarà dismesso nel 2020. Per gli utenti AWS, si prega di utilizzare AWS Config. Per gli utenti GCP, si prega di utilizzare Cloud Asset Inventory. Security Monkey Security Monkey monitora i tuoi account AWS e GCP per rilevare modifiche alle policy ...

PYSEC-2026-919 Netflix Security Monkey Open Redirect vulnerability

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

EUVD-2022-4292

Malicious code in bioql PyPI...

Netflix Security Monkey Open Redirect vulnerability

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

GHSA-J6JQ-3Q8P-XGG6 Netflix Security Monkey Open Redirect vulnerability

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

Monitor AWS & GCP Configurations: Security Monkey

Monitor AWS & GCP Configurations Security Monkey is an OpenSource application from Netflix NetflixOSS which monitors/alerts/reports one or multiple AWS/GCP accounts for anomalies. Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure configurations. It...

Netflix Security Monkey Open Redirect Vulnerability

Netflix Security Monkey is a set of policy change and alerting tools for monitoring insecure configurations in your AWS account. Netflix Security Monkey suffers from an open redirection vulnerability. An attacker can exploit the vulnerability to redirect users to arbitrary domains with the help o...

Shopify: Full access at an internal service of Shopify

A Security Monkey instance was left accessible to the public. Even though this is outside of our usual scope, we fixed and rewarded this issue due to the nature of the information contained in this instance...

CVE-2017-7266

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

CVE-2017-7266

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

Open redirect

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

CVE-2017-7266

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

CVE-2017-7266

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

PT-2017-17623

Name of the Vulnerable Software and Affected Versions Netflix Security Monkey versions prior to 0.8.0 Description The issue concerns the logout functionality, which accepts a next parameter. This parameter allows redirection to any domain, regardless of the Host header, thus facilitating an open...

CVE-2017-7266: URL Redirection to Untrusted Site

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

Netflix Open Source Security Tools Solve Range of Challenges

Few organizations experience the scale of Web-based application security challenges that Netflix engineers deal with on a regular basis. Sometimes the response to a threat requires a homespun tool that, more often than not, ends up being released to open source. “Our assumption is that we...