Privilege Escalation

github.com/volcano-sh/volcano is vulnerable to Privilege Escalation. The vulnerability is due to insecure permissions in Volcano, which allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Volcano has insecure permissions

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

GHSA-5G3X-8G2V-R8X8 Volcano has insecure permissions

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

PT-2024-27053 · Volano · Volcano

Name of the Vulnerable Software and Affected Versions: volcano version 1.8.2 Description: The issue is related to insecure permissions, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. This can be achieved through the volcano.sh/volcano...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36533

CVE-2024-36533 affects Volcano (volcano-sh) with insecure permissions in version 1.8.2 and earlier. The underlying issue permits attackers to access sensitive data and escalate privileges by obtaining the service account token, potentially via the volcano.sh/volcano endpoint. Documented impact is...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Volcano 安全漏洞

Volcano is a batch processing system built on Kubernetes by Volcano Open Source. A security vulnerability exists in Volcano v1.8.2 and earlier versions, which stems from the presence of an insecure privilege allowing an attacker to access sensitive data and elevate privileges by obtaining a token...

Volcano Demon Ransomware Gang Makes Phone Calls to Victim for Ransom

According to cybersecurity researchers at Halcyon AI, the new Volcano Demon ransomware gang calls its victims "very frequently,…...

TaskCanvas 1.4.0 - (Registration) Denial Of Service Exploit

Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.html Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC:...

TaskCanvas 1.4.0 Denial Of Service

Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.html Tested on OS: Windows 10 CVE : N/A ''' Proof of...

TaskCanvas 1.4.0 - 'Registration' Denial Of Service

Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.html Tested on OS: Windows 10 CVE : N/A ''' Proof of...

Duplicate Cleaner Pro 4 - Denial of Service (PoC)

Duplicate Cleaner Pro 4 - Denial of Service PoC Exploit Title: Duplicate Cleaner Pro 4 - Denial of Service PoC Date: 2020-01-05 Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/DuplicateCleanerPro4setup.exe Exploit Author: Achill...

TextCrawler Pro3.1.1 - Denial of Service (PoC)

TextCrawler Pro3.1.1 - Denial of Service PoC Exploit Title: TextCrawler Pro3.1.1 - Denial of Service PoC Date: 2020-05-01 Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/TextCrawlerPro=setup.exe Exploit Author: Achilles Tested...

TextCrawler Pro3.1.1 - Denial of Service Exploit

Exploit Title: TextCrawler Pro3.1.1 - Denial of Service PoC Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/TextCrawlerPro=setup.exe Exploit Author: Achilles Tested Version: 3.1.1 Tested on: Windows 7 x64 1.- Run python code...

Duplicate Cleaner Pro 4 - Denial of Service (PoC)

Exploit Title: Duplicate Cleaner Pro 4 - Denial of Service PoC Date: 2020-01-05 Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/DuplicateCleanerPro4setup.exe Exploit Author: Achilles Tested Version: 4.1.3 Tested on: Windows 7 x6...

Duplicate Cleaner Pro 4 Denial Of Service

Exploit Title: Duplicate Cleaner Pro 4 - Denial of Service PoC Date: 2020-01-05 Vendor Homepage:https://www.digitalvolcano.co.uk/index.html Software Link: https://www.digitalvolcano.co.uk/download/DuplicateCleanerPro4setup.exe Exploit Author: Achilles Tested Version: 4.1.3 Tested on: Windows 7 x6...

Facebook Game - Miscrits of Volcano Island Detected (deprecated)

Binary data 6440.prm...

U.S. Geological Survey Website - SQL Injection Vulnerability

Document Title: =============== U.S. Geological Survey Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=278 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ===================================...