Lucene search
+L

1690 matches found

Kitploit
Kitploit
added 2026/09/13 5:18 a.m.89 views

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

5.6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:12 a.m.11 views

kube-linter

Static analysis for Kubernetes What is KubeLinter? KubeLinter analyzes Kubernetes YAML files, Helm charts, and Kustomize manifests, and checks them against a variety of best practices, with a focus on production readiness and security. KubeLinter runs sensible default checks, designed to give you...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 1:21 a.m.159 views

vapi

vAPI...

5.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 12:31 a.m.12 views

stackrox

Tabla de Contenidos Plataforma de Seguridad Kubernetes de StackRox Tabla de Contenidos Comunidad Despliegue de StackRox Instalación Rápida usando Helm Instalación Manual usando Helm Instalación usando el Operador Instalación mediante Scripts Distribuciones de Kubernetes EKS, AKS, GKE OpenShift...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 2:31 p.m.9 views

CVE-2025-14269

CVE-2025-14269 A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse cached credentials to access Helm functionality through the Headlamp UI. Kubernetes clusters are only affected if Headlamp is installed, is configured with...

7.8AI score
SaveExploits2
OPENSUSE Linux
OPENSUSE Linux
added 2026/09/10 12:00 a.m.6 views

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21809-1 Rating: important References: bsc1270127 bsc1271660 bsc1272402 bsc1276514 bsc1276644 bsc1277949 bsc1278270 bsc1278273 bsc1278688...

9.1CVSS6AI score0.0044EPSS
SaveExploits2References9
Kitploit
Kitploit
added 2026/09/09 12:35 p.m.5 views

helm-plugin-path-traversal-security-assessment

CVE-2026-35204 - Helm Plugin Path Traversal Arbitrary File Write Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Helm plugin path traversal risk, including technical analysis, impact, remediation, and mitigation strategy. 📍 Report Snapshot...

8.6CVSS6.4AI score0.00197EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 12:11 p.m.15 views

CVE-2026-35204

CVE-2026-35204 This repository represents a PoC to a CVE-2026-35204 Description "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem...

8.6CVSS6.5AI score0.00197EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 12:02 p.m.4 views

chart-down

chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requisitos Go 1.19+ TruffleHog en PATH brew install trufflehog Instalación...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 9:38 a.m.7 views

CVE-2025-53547-POC

CVE-2025-53547 POC this is a poc for CVE-2025-53547 Chart.lock links test file to /tmp/1.txt /tmp/1.txt inject a command that create /tmp/2.txt In real product enviroment, you can change Chart.lock link file to inject any command you want such as: /root/.bashrc /root/.bashprofile /etc/profile...

8.6CVSS6.9AI score0.00378EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/08 1:30 a.m.3 views

CLEANSTART-2026-RU97646 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the helm-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references fo...

9.8CVSS6.5AI score0.07314EPSS
SaveExploits5References156
Kitploit
Kitploit
added 2026/09/07 1:16 p.m.4 views

gha-lab-8aba6b05dc

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of CloudPirates-io/helm-charts at commit...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 1:16 p.m.5 views

gha-lab-5511dc3f73

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of CloudPirates-io/helm-charts at commit...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/06 4:14 p.m.8 views

gha-lab-a815a82f03-1

CloudPirates ओपन सोर्स हेल्म चार्ट्स क्लाउड-नेटिव एप्लिकेशनों के लिए प्रोडक्शन-रेडी हेल्म चार्ट्स का एक चयनित संग्रह। यह रिपॉजिटरी क्लाउड-नेटिव सर्वोत्तम प्रथाओं का पालन करते हुए सुरक्षित, अच्छी तरह से प्रलेखित और कॉन्फ़िगरेबल हेल्म चार्ट प्रदान करती है। ⚠️ महत्वपूर्ण : 15 अप्रैल, 2026 से, सभी...

6AI score
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/09/04 5:45 p.m.10 views

CVE-2024-58376

A flaw was found in Renovate's helmv3 manager. This command injection vulnerability allows an attacker with commit access to a repository to execute arbitrary commands. By manipulating registryAliases keys with unquoted shell metacharacters, an attacker can inject commands during helm repo add...

9.3CVSS5.8AI score0.01671EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/04 12:00 a.m.4 views

OPENSUSE-SU-2026:11686-1 helm3-3.21.3-8.1 on GA media

These are all security issues fixed in the helm3-3.21.3-8.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS7.2AI score0.00415EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/09/04 12:00 a.m.4 views

helm-4.2.4-1.1 on GA media (moderate)

helm-4.2.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11668-1 Rating: moderate Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

5.3CVSS5.5AI score0.00336EPSS
SaveExploits0
NVD
NVD
added 2026/09/03 4:18 p.m.9 views

CVE-2026-75036

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet...

5.3CVSS0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 3:15 p.m.15 views

CVE-2026-75036

Fleet (Rancher's GitOps operator) is vulnerable to DNS-based information disclosure during Helm template preprocessing. The Sprig getHostByName function, evaluated by the Fleet controller, can reach network resources outside the management cluster, allowing a user who can supply bundle content to...

5.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 3:15 p.m.33 views

CVE-2026-75036 Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet...

5.3CVSS0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder