kube-bench

kube-bench — это инструмент, который проверяет, безопасно ли развернут Kubernetes, выполняя проверки, описанные в...

scan-cve-2018-8115

root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Инструмент CLI для проверки Docker-образов CVE-2018-8115 Чтобы помочь сообществу оставаться в безопасности, мы в Aqua...

trivy-plugin-aqua

trivy-plugin-aqua Trivy-Plugin für die Integration mit der Aqua Security SaaS-Plattform Verwendung Trivys Optionen müssen nach -- übergeben werden. Trivy erhält ein Zielverzeichnis, das IaC-Dateien enthält. Legen Sie das Aqua-Plugin als aktuelles Standard-Plugin von Trivy fest, indem Sie eine...

CVE-2026-55569

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:36+00:00| published-proof-of-concept| https://github.com/aquaproj/aqua/security/advisories/GHSA-mf5c-hw34-4hpp...

teampcp-supply-chain-attack

Attacco alla Supply Chain di TeamPCP: Guida Tecnica e al Rilevamento CVE-2026-33634 CVSS 9.4 — L'attacco alla supply chain CI/CD più impattante del 2026 finora. Tra il 19 e il 25 marzo 2026, l'attore della minaccia TeamPCP monitorato anche come DeadCatx3, PCPcat, ShellForce, CanisterWorm ha...

Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

GHSA-MF5C-HW34-4HPP Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

EUVD-2026-67827

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

vuln-list-aqua

vuln-list-aqua Sicherheitshinweise von Aqua Security...

trivy-operator

Toolkit di sicurezza nativo per Kubernetes. Documentazione...

cloudsploit

CloudSploit di Aqua - Scansioni di Sicurezza Cloud Avvio rapido Generico root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $...

tfsec

📣 Migrazione da tfsec a Trivy Come parte del nostro obiettivo di fornire una soluzione di sicurezza open source completa per tutti, abbiamo consolidato tutti i nostri sforzi relativi alla scansione in un unico posto, ovvero Trivy. Nell'ultimo anno, tfsec ha gettato le basi per le capacità di...

aqua-checksums

aqua-checksums Monitoraggio esterno dell'integrità della catena di fornitura per i progetti open source di Aqua Security. Cosa fa questo repository Questo repository monitora continuamente l'integrità degli artefatti pubblicati da Aqua Security — immagini container, release GitHub, tag Git e asse...

CVE-2026-57789

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through = 5.1.2...

CVE-2026-57789 WordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through = 5.1.2...

CVE-2026-57789

Technical details about CVE-2026-57789 are not publicly available in the provided documents; please monitor for updates.

CVE-2026-57789

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through = 5.1.2...