CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: loki, cloud-sql-proxy, external-dns, tofu-controller, local-static-provisioner, clickhouse-operator, dapr, node-feature-discovery...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, kube-bench, external-dns, tofu-controller, local-static-provisioner, clickhouse-operator, dapr, node-feature-discovery...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, external-dns, caddy, tofu-controller, local-static-provisioner, clickhouse-operator, crossplane-provider-aws-s3, dapr, node-feature-discovery...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

renovate-operator

Renovate: la forma nativa de Kubernetes Ejecuta Renovate en tu propia infraestructura con programación basada en CRD, ejecución en paralelo, autodescubrimiento y una interfaz de usuario integrada. Si autoalojas Renovate y ya ejecutas Kubernetes, este operador te brinda el control y la...

starboard

Starboard se une a Trivy. Hemos anunciado nuestros planes de discontinuar Starboard y fusionarlo con Trivy. La CLI de Starboard se ha reintroducido como el comando trivy kubernetes y starboard-operator con un enfoque en las capacidades de trivy está disponible como Trivy-Operator. No aceptaremos...

trivy-operator

Kit de herramientas de seguridad nativo de Kubernetes. Documentación Introducción Trivy Operator aprovecha Trivy para escanear continuamente tu clúster de Kubernetes en busca de problemas de seguridad. Los escaneos se resumen en informes de seguridad como Custom Resource Definitions de Kubernetes...

sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...

CVE-2025-51401

Título del Exploit: LiveHelperChat 4. Guarda los...

CVE-2025-51397

Título del Exploit: LiveHelperChat img src="https://raw.githubusercontent.com/thewhiteevil/cve...

chaos-operator

Litmus chaos-operator for injecting chaos experiments on Kubernetes Codacy Badge Litmus chaos operator is used by Kubernetes application developers and SREs to inject chaos into the applications and Kubernetes infrastructure in a managed fashion. Its objective is to make the process of validation...

BackupOperatorToolkit

BackupOperatorToolkit Uso El BackupOperatorToolkit BOT tiene 4 modos diferentes que permiten escalar de Operador de Respaldo a Administrador de Dominio. Ejecute "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" antes de ejecutar la herramienta. Modo Servicio El modo SERVICIO crea...

GeckoDroid

GeckoDroid Cliente móvil para Adaptix C2 Framework. Acceso completo de operador desde tu dispositivo Android. Qué hace GeckoDroid te da control sobre tu servidor Adaptix C2 desde cualquier lugar. En lugar de estar frente al cliente de escritorio, puedes gestionar las operaciones sobre la marcha...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – SQLite FTS3 Match Infoleak via Query Crafting Program Code Python sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES...

atomic-operator

license atomic-operator Este paquete de Python se utiliza para ejecutar pruebas de Atomic Red Team Atómicas en múltiples entornos de sistemas operativos. ¿Qué hay de nuevo? ¿Por qué? atomic-operator permite a los profesionales de seguridad probar sus capacidades de detección y defensa contra las...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: kube-bench-fips, kube-bench, timescaledb-parallel-copy-fips, ldap2pg-fips, typescript, backup-restore-operator, tigera-operator, ldap2pg, timescaledb-parallel-copy, grafana, wavefront-collector-for-kubernetes, grafana-fips...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: kube-bench-fips, kube-bench, timescaledb-parallel-copy-fips, ldap2pg-fips, typescript, backup-restore-operator, tigera-operator, ldap2pg, timescaledb-parallel-copy, grafana, wavefront-collector-for-kubernetes, grafana-fips...

nebula

Nebula AI Powered Pentesting Nebula 3 Assistant with a sample assessment conversation Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop...

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...