kubestriker

A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...

trivy-operator

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path...

Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native.

Enable native runtime protection for GKE in just one click. The Wiz Runtime Sensor add-on now automates deployment and credential management while delivering predictable, kernel-level eBPF threat detection for your GKE Kubernetes fleets...

USN-8816-4: Linux kernel (GKE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

Malicious code in gke-net (npm)

Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code. --- Credit: OpenSSF source...

USN-8660-1 linux-gcp, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: hey, gke-gcloud-auth-plugin, kubeflow-katib, restic, go, dynamic-localpv-provisioner, kubeflow-fips, terraform-provider-sendgrid, wireguard-go, k3d, kubeflow, dynamic-localpv-provisioner-fips, kube-state-metrics, terraform-provider-sendgrid-fips, grpcurl...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: restic, wireguard-go, terraform-provider-sendgrid, go, kubeflow-katib, kubeflow, gke-gcloud-auth-plugin, grpcurl, k3d, hey, dynamic-localpv-provisioner...

GCP Network Paths

Map network exposure paths via firewalls, VPCs, GKE endpoints, and Cloud Run ingress !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Network Paths", "description": "Map network exposure pat...

GCP GKE Clusters

Enumerate Google Kubernetes Engine clusters in the current GCP project !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP GKE Clusters", "description": "Enumerate Google Kubernetes...

Malicious code in gke-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code...

MAL-2026-2766 Malicious code in gke-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code...

CVE-2026-4810

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...

CVE-2026-4810: Missing Authentication for Critical Function

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...

Ubuntu: Security Advisory (USN-8059-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8013-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7928-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7889-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7793-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...