harbor

팀 소개 충칭 주궁격 보안 팀 은 오픈소스 보안 도구를 공유하는 데 힘쓰고 있으며, 연구 방향은 레드-블루 대결, 웹 보안, 모바일 보안, 보안 개발, 기업 보안 구축, IoT/산업 제어 보안/AI/양자 보안 등 여러 분야를 포괄합니다. 보안에 관심이 있는 분들은 저희를 팔로우해 주세요. harbor CVE-2022-46463 완전 자동 다운로드 스크립트 실제 공방 훈련이나 공급망 공격에서 harbor 시스템을 자주 접하게 됩니다. 개발자 권한 오류 설정이나 이미지를 공개해야 하는 등의 이유로, 이때 전자동 기능을 갖춘 스크립...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2024-23653

root@kitploit: syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status root@kitploit: sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. root@kitploit: ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. ...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor nicht autorisiert Details zur Sicherheitslücke siehe Stack Community Verwendung root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Optionen root@kitploit: -u URL, --url URL Ziel-URL z.B. http://example.com -h, --help Hilfemeldung anzeigen u...

CVE-2019-16097

CVE-2019-16097 Principio della vulnerabilità di creazione non autorizzata di amministratore in Harbor, docker e poc basato su pocsuite framework...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, portieris, vcluster, cri-tools, prometheus-operator, azure-workload-identity-webhook, sonobuoy, newrelic-infra-operator, kwok, kubernetes-csi-driver-hostpath, k6, hubble, cluster-api-azure-controller, frp, dagdotdev, kserve-rest-proxy,...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3607 vulnerabilities

Vulnerabilities for packages: tailscale, zitadel, harbor, harbor-fips...

GO-2024-2958 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...

GO-2025-3585 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3823 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: zot, buildah, skopeo...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562 FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

EUVD-2026-44749

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562

CVE-2026-50562 describes a supply-chain risk in FastGPT where, at commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted PR code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged workflo...