harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2024-23653

root@kitploit: syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status root@kitploit: sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. root@kitploit: ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. ...

CVE-2026-8862

IBM Netezza Software versions 11.3.0.3 through Interim Fix 002 contain hardcoded credentials in the application source code, granting unauthorized network access to the associated container registry . The exposed secret allows attackers to pull private container images , potentially revealing pro...

EUVD-2026-70745

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor 무단 인증 취약점 취약점 상세 내용은 Stack 커뮤니티에서 확인 가능합니다. 사용 root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 옵션 root@kitploit: -u URL, --url URL Target URL e.g. http://example.com -h, --help Show help message and exit docker pull xxx 명령어가 직접 표시되었습니다...

CVE-2019-16097

CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: kube-bench, eksctl, rancher-helm, haproxy-ingress, nri-haproxy, weaviate, metrics-agent, crossplane-provider-keycloak, jaeger-operator, helm-mapkubeapis, newrelic-infra-operator, fscrypt, chart-testing, aws-flb-firehose, tailscale, knative-client, nri-apache,...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3607 vulnerabilities

Vulnerabilities for packages: zitadel, harbor-fips, tailscale, harbor...

GO-2024-2958 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, zot, harbor-scanner-trivy-fips...

GO-2025-3585 vulnerabilities

Vulnerabilities for packages: harbor-fips, harbor...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3823 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: zot, buildah, skopeo...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562 FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...