whoc

whoc Un'immagine contenitore che estrae il runtime del contenitore sottostante e lo invia a un server remoto. Esplora il runtime del contenitore sottostante della tua piattaforma CSP preferita! WhoC at Defcon 29 Cloud Village Azurescape - ricerca basata su whoc, la prima acquisizione di un...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

dockle

Dockle - Linter per immagini container per la sicurezza, aiuta a costruire l'immagine Docker secondo le migliori pratiche, facile da iniziare Dockle ti aiuta: 1. Costruire immagini Docker Best Practice 2. Costruire immagini Docker sicure I checkpoint includono CIS Benchmarksbash $ brew untap...

trivy

📖 दस्तावेज़ीकरण Trivy उच्चारण एक व्यापक और बहुमुखी सुरक्षा स्कैनर है। Trivy में स्कैनर हैं जो सुरक्षा समस्याओं की तलाश करते हैं, और लक्ष्य जहाँ वह उन समस्याओं को पा सकता है। लक्ष्य Trivy क्या स्कैन कर सकता है: कंटेनर इमेज...

CVE-2026-48750

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red...

cve-2018-17207

CVE-2018-17207 Questa è parte di Cved: uno strumento per gestire container Docker vulnerabili. Cved: https://github.com/git-rep-src/cved Sorgente immagine: https://github.com/cved-sources/cve-2018-17207 Autore immagine: https://github.com/cved-sources/cve-2018-17207...

cve-2016-7434

CVE-2016-7434 यह Cved का हिस्सा है: कमजोर docker containers को प्रबंधित करने के लिए एक उपकरण। Cved: https://github.com/git-rep-src/cved इमेज स्रोत: https://github.com/cved-sources/cve-2016-7434 इमेज लेखक: https://github.com/opsxcq/exploit-CVE-2016-7434...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

nginx-cve-fix

Nginx CVE Fix - Aus dem Quellcode erstelltes Drop-in für nginx:1.25-bookworm Ein aus dem Quellcode erstelltes nginx 1.25.5 Container-Image, das zwei CVE-Korrekturen aus dem offiziellen nginx:1.25-bookworm-Image behebt, während das Upstream-Laufzeitverhalten erhalten bleibt...

GitLeaks

Immagine Container di GitLeaks Build opinionato di gitleaks per la scansione di segreti in flussi di lavoro locali e pipeline. Caratteristiche Costruisce gitleaks dal sorgente upstream taggato con toolchain Go fissate per binari riproducibili. Componente GitLab CI su niclas-zone/ci/gitleaks...

dasel-melange-apko

dasel v3.3.1 — Melange + apko Build, gepatcht für CVE-2026-33320 Dieses Repository paketiert das dasel CLI v3.3.1 als APK mit Melange , erstellt ein minimales Container-Image mit apko und wendet eine Lösung für CVE-2026-33320 an, während es auf dem v3.3.1-Codebestand bleibt ein Patch, kein...

anchore-engine

Anchore Engine NOTA IMPORTANTE A partire dal 2023, Anchore Engine non è più mantenuto. Non saranno rilasciate versioni future. Si consiglia agli utenti di utilizzare Syft e Grype. Per gli utenti interessati a una soluzione commerciale supportata per la scansione dei container e la conformità,...

CVE-2026-71470 Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource CR editor, to manipulate Search CR fields such as imageOverride, arguments, and environment variables without proper validation. By exploiting this, an attacker can mount...

CVE-2026-71470

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource CR editor, to manipulate Search CR fields such as imageOverride, arguments, and environment variables without proper validation. By exploiting this, an attacker can mount...

EUVD-2026-61139

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with...

CVE-2026-75625 Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-66793 Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

EUVD-2026-60951

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...