-
gcp-dhcp-takeover-code-exec
Google Compute Engine (GCE) VM takeover via DHCP flood - gain root access by getting SSH keys added by google_guest_agent
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
> The AWS security team coded a fix in less than 25 hours, and it reached all AWS regions within 6 days.
That is really fast. It reminds me of the Google DHCP takeover vuln that Google sat on for 9 months (https://github.com/irsl/gcp-dhcp-takeover-code-exec).
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a more popular project.