61593 matches found
CVE-2026-78663 vulnerabilities
Vulnerabilities for packages: authservice, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cluster-api-aws-controller, eksctl, kor, gatekeeper, helm-set-status, minio-object-browser, amazon-cloudwatch-agent, k3s, flux-image-reflector-controller, conftest,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: authservice, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cluster-api-aws-controller, eksctl, kor, gatekeeper, helm-set-status, minio-object-browser, amazon-cloudwatch-agent, k3s, flux-image-reflector-controller, conftest,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: authservice, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cluster-api-aws-controller, eksctl, kor, gatekeeper, helm-set-status, minio-object-browser, amazon-cloudwatch-agent, k3s, flux-image-reflector-controller, conftest,...
CVE-2026-97032 vulnerabilities
Vulnerabilities for packages: authservice, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cluster-api-aws-controller, eksctl, kor, gatekeeper, helm-set-status, minio-object-browser, amazon-cloudwatch-agent, k3s, flux-image-reflector-controller, conftest,...
cdn-ip-scanner
CDN IP Scanner V3.0 High Accuracy • Ultra Fast • Real-Time 🌐 Language: English | فارسی Install • Features • Usage • What's new • Developers • Donate 📚 Table of Contents 1. Overview 2. Features 3. Installation npm app Windows / macOS / Linux — step by step Android app Linux server Release files &...
CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting
CVE-2026-21004 – SQLite FTS3 Match Infoleak via Query Crafting Program Code Python sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES...
atomic-operator
license atomic-operator Este paquete de Python se utiliza para ejecutar pruebas de Atomic Red Team Atómicas en múltiples entornos de sistemas operativos. ¿Qué hay de nuevo? ¿Por qué? atomic-operator permite a los profesionales de seguridad probar sus capacidades de detección y defensa contra las...
CVE-2026-56851 vulnerabilities
Vulnerabilities for packages: timescaledb-parallel-copy-fips, grafana-fips, commercial-gitlab-workhorse-ee-fips, ldap2pg, backup-restore-operator, timescaledb-parallel-copy, typescript, kube-bench, grafana, tigera-operator, vault-fips, wavefront-collector-for-kubernetes,...
GO-2026-6629 vulnerabilities
Vulnerabilities for packages: timescaledb-parallel-copy-fips, grafana-fips, commercial-gitlab-workhorse-ee-fips, ldap2pg, backup-restore-operator, timescaledb-parallel-copy, typescript, kube-bench, grafana, tigera-operator, vault-fips, wavefront-collector-for-kubernetes,...
EUVD-2026-95335
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another...
CVE-2026-105269
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another...
CVE-2026-105269 Satel Netco Design Cross-site Scripting
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another...
backup_dc_registry
Backup Operator Registry Backup to Domain Compromise A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY hives. Research credit to: @filipdragovic Ported from @mpgn Windows PoC Usage This proof of concept is a modified version of impacket/examples/reg.py a...
Fortigate-SSL-VPN-Exploit-Kit
FortiGate SSL-VPN kit recovered in the wild Research archive. Recovered as found. I did not write these files. Released: 1 September 2026 This repository is the orchestrator, second-stage payloads, and operator listeners that sit on top of a per-SKU FortiGate SSL-VPN exploit catalog. The long-for...
freebsd-CVE-2026-7270
Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 FreeBSD local privilege escalation viaexecargsadjustargs OOB memmove An operator-precedence bug in execargsadjustargs sys/kern/kernexec.c, present since 2013 lets any local user escalate to root on a...
trivy-enforcer
trivy-enforcer EXPERIMENTAL Kubernetes Operator for Image Assurance It works as Admission Controller protecting unsafe images from being deployed Custom Controller watching ImageVulnerability CRD and scanning the image in the custom resource automatically Setup $ kubectl apply -f manifests/opa.ya...
CVE-2026-93017
The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...
CVE-2026-93017
The insights-operator contains a security misconfiguration where the insights-operator-gather ClusterRole grants the gather service account excessive permissions. Specifically, it allows read access (get, list) to secrets in the core API group without any namespace or resource names restrictions....
CVE-2026-93017 Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...
EUVD-2026-95030
The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...