kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

cluster-image-scanner

ClusterImageScanner プロダクション環境における脆弱性とコンテナイメージの設定ミスを検出します。 はじめに ClusterImageScanner は、Kubernetes クラスター内のイメージを検出し、さまざまなセキュリティテストに基づいて迅速なフィードバックを提供します。実際に影響のあるセキュリティ問題に対して最新のフィードバックを得るために、プロダクション環境で ClusterImageScanner を実行することを推奨します。 ClusterImageScanner 自体は Kubernetes...

mesh-kridik

mesh-kridik Kubernetes サービスメッシュのセキュリティを強化しましょう！ mesh-kridik は、istio サービスメッシュを使用した Kubernetes クラスターに対してさまざまなセキュリティチェックを実行し、セキュリティレポートを出力するオープンソースのセキュリティチェッカーです。 セキュリティチェックテストは、istio セキュリティのベストプラクティス の完全な実装です。 セキュリティチェックは、istio サービスメッシュを使用した Kubernetes クラスターに対して実行され、OPA（Open Policy...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover CVE-2025-59359の実践的なフォレンジックウォークスルーです。Chaos-Meshの重大なOSコマンドインジェクションの脆弱性について、攻撃者がGraphQLミューテーションを介してKubernetesクラスタを乗っ取る方法と、ELKを使用して侵害を検出・分析・報告する方法を学びます。 Mark Mallia 著 エグゼクティブサマリー...

kubetcd

Kubetcd Wrapper di https://github.com/jpbetz/auger. Automatizza il deployment dei pod scrivendo direttamente in etcd. Include diverse funzioni per la post-esplorazione di etcd compromessi. Avvertenza !WARNING Questa è una PoC, non utilizzarla in un ambiente di produzione. Scrivere direttamente in...

CVE-2026-62440

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

EUVD-2026-63835

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

PT-2026-79328

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper Access Control in the Kubernetes Service CKS plugin allows cross-tenant manipulation of the Kubernetes cluster during the process of adding and removing nodes...

GO-2023-1850 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-4102 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2023-1992 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2020-0012 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2023-1709 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2026-18942

A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could lead to a direct escalation of...

EUVD-2026-55812

A flaw was found in the Data Science Pipelines Operator DSPO. The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wi...

CVE-2026-18608

The vulnerability CVE-2026-18608 affects the Data Science Pipelines Operator (DSPO). Its ClusterRole grants excessive privileges beyond what is needed, including pods/exec and cluster-wide role/binding control. If a DSPO pod is compromised, an attacker could leverage these permissions to achieve ...

EUVD-2026-55810

A flaw was found in the TrustyAI Service TAS deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data and configurations, and inject arbitrary...

PT-2026-69962

Name of the Vulnerable Software and Affected Versions Feast operator affected versions not specified Description A flaw allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to...

PT-2026-60566

Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.19.5 cert-manager versions 1.20.0 through 1.20.2 Description Namespace users can create Challenge resources under acme.cert-manager.io without admission validation that ties the Challenge to an Order, own...