popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

CVE-2023-28432_docker

CVE-2023-28432docker Entornos de prueba para CVE-2023-28432, divulgación de información en clústeres de MinIO. Los directorios proporcionan diferentes versiones / configuraciones para un clúster de MinIO:...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

FACT

Forensic Artefact Collection Tool Overview FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for...

mks-copy-fail-mitigation

DaemonSets de mitigación de Copy Fail DaemonSets para corregir las vulnerabilidades de la familia Copy Fail en todos los nodos worker de los clústeres MKS. Contenido CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Descripción de la...

hayat

Hayat Google Cloud Platform 审计与加固脚本 "Hayat" 是什么意思？ 嗯，老实说，我很难找到一个独特的名字。"Hayat" 是一个土耳其语单词，在英语中意为"生命"，同时也是我侄女的名字。准备好见她了吗？ 😍 😍 😍 Hayat 是一个用于 Google Cloud Platform 服务的审计与加固脚本，涵盖的服务包括： 身份与访问管理 日志记录与监控 网络 虚拟机 存储 Cloud SQL 实例 Kubernetes 集群 目前仅支持以上服务。 身份与访问管理 确保使用企业登录凭据而非 Gmail 账户。 确保每个服务账户仅使用 GCP...

Unlearnable-Clusters

Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples Código relativo a "Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples", CVPR2023. Preprocesamiento Primero, ejecuta preprocess.py para renombrar el directorio del conjunto de datos. root@kitploit: python preprocess.p...

CVE-2020-8554

Mitigare CVE-2020-8554 con Policy Controller Questo repository contiene i file di configurazione per utilizzare Policy Controller, basato sul progetto open source OPA Gatekeeper, per bloccare l'utilizzo di IP pubblici da parte dei Servizi Kubernetes. L'avviso di sicurezza per questo problema...

CVE-2018-4878-

-cms Identificazione batch di CMS su cluster di server, ricerca batch di backup, iniezione batch. Backup versione gruppo VIP...

kubeclarity

!IMPORTANT KubeClarity को डिप्रीकेट कर दिया गया है और इसे openclarity/openclarity द्वारा प्रतिस्थापित किया गया है। अधिक जानकारी के लिए रिलीज़ स्टेटमेंट देखें। यह प्रोजेक्ट अपडेट प्राप्त नहीं करता है। हम आपको माइग्रेट करने के लिए प्रोत्साहित करते हैं। KubeClarity एक उपकरण है जो कंटेनर छवियों और...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.14 security update

Red Hat multicluster engine for Kubernetes v2.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectorsperclusters When the NTFS BOOT sectorsperclusters field is greater than 0x80, it represents a shift value. Ensure that the shift value is not too large before using it the maximum cluster size for...

CVE-2026-66788

CVE-2026-66788 is a critical (CVSS 9.9) vulnerability in Lighthouse , a Kubernetes multi-cluster service mesh component. The root cause is that the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. An attacker who comprom...

CVE-2026-66794

A critical (CVSS 9.3) unauthenticated SSRF vulnerability exists in the cluster-proxy-addon component of Multicluster Engine for Kubernetes . An attacker with network access to the user-facing route can bypass authentication and authorization by manipulating URL path segments, proxying requests to...

CVE-2026-66781

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

PT-2026-77225

Name of the Vulnerable Software and Affected Versions Submariner operator affected versions not specified Description A flaw exists in the Submariner operator where the Submariner Custom Resource CR, used for network connectivity configuration, stores the IPsec pre-shared key PSK in an unencrypte...

CVE-2026-66792 Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into a...

CVE-2026-72200 ntfs: detect mapping-pairs LCN accumulator overflow

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt runlis...

EUVD-2026-57686

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...