CVE-2025-32777: Allocation of Resources Without Limits or Throttling

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

Volcano 安全漏洞

Volcano is a batch processing system built on Kubernetes by Volcano Open Source. A security vulnerability exists in Volcano versions prior to 1.11.2, which stems from a service or plugin being under the control of an attacker and could lead to a denial of service and elevation of privilege...

GO-2024-3034 Volcano has insecure permissions in volcano.sh/volcano

Volcano has insecure permissions in volcano.sh/volcano...

Privilege Escalation

github.com/volcano-sh/volcano is vulnerable to Privilege Escalation. The vulnerability is due to insecure permissions in Volcano, which allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Volcano has insecure permissions

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

GHSA-5G3X-8G2V-R8X8 Volcano has insecure permissions

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36533: Improper Restriction of Security Token Assignment

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

PT-2024-27053 · Volano · Volcano

Name of the Vulnerable Software and Affected Versions: volcano version 1.8.2 Description: The issue is related to insecure permissions, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. This can be achieved through the volcano.sh/volcano...

CVE-2024-36533

The batch processing system Volcano (specifically version v1.8.2 and earlier) is vulnerable to a privilege escalation flaw due to insecure permissions . An attacker can exploit this to access sensitive data and escalate privileges by obtaining a service account's token through the volcano.sh/volc...

Volcano 安全漏洞

Volcano is a batch processing system built on Kubernetes by Volcano Open Source. A security vulnerability exists in Volcano v1.8.2 and earlier versions, which stems from the presence of an insecure privilege allowing an attacker to access sensitive data and elevate privileges by obtaining a token...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Volcano Demon Ransomware Gang Makes Phone Calls to Victim for Ransom

According to cybersecurity researchers at Halcyon AI, the new Volcano Demon ransomware gang calls its victims "very frequently,…...

TaskCanvas 1.4.0 - (Registration) Denial Of Service Exploit

Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.html Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC:...

TaskCanvas 1.4.0 Denial Of Service

Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.html Tested on OS: Windows 10 CVE : N/A ''' Proof of...

TaskCanvas 1.4.0 - 'Registration' Denial Of Service

Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.html Tested on OS: Windows 10 CVE : N/A ''' Proof of...

TextCrawler Pro3.1.1 - Denial of Service Exploit

Exploit Title: TextCrawler Pro3.1.1 - Denial of Service PoC Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/TextCrawlerPro=setup.exe Exploit Author: Achilles Tested Version: 3.1.1 Tested on: Windows 7 x64 1.- Run python code...

TextCrawler Pro3.1.1 - Denial of Service (PoC)

TextCrawler Pro3.1.1 - Denial of Service PoC Exploit Title: TextCrawler Pro3.1.1 - Denial of Service PoC Date: 2020-05-01 Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/TextCrawlerPro=setup.exe Exploit Author: Achilles Tested...

Duplicate Cleaner Pro 4 - Denial of Service (PoC)

Duplicate Cleaner Pro 4 - Denial of Service PoC Exploit Title: Duplicate Cleaner Pro 4 - Denial of Service PoC Date: 2020-01-05 Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/DuplicateCleanerPro4setup.exe Exploit Author: Achill...