trivy-operator

Kubernetes 原生安全工具包。（文档） 简介 Trivy Operator 利用 Trivy 持续扫描您的 Kubernetes 集群以发现安全问题。扫描结果以 Kubernetes 自定义资源定义的形式汇总为安全报告，可通过 Kubernetes API 访问。该 Operator 通过监视 Kubernetes 的状态变化并自动触发安全扫描来工作。例如，当创建新的 Pod 时，会启动漏洞扫描。 这样，用户就可以以 Kubernetes 原生的方式查找和查看与不同资源相关的风险。 集群内安全扫描 Trivy Operator 自动生成并更新安全报告。这些报告是针对...

kube-bench

kube-bench 是一个工具，用于检查 Kubernetes 是否按照 CIS Kubernetes 基准 中记录的检查项安全部署。 测试使用 YAML 文件进行配置，使得该工具在测试规范演变时易于更新。 作为 Trivy 和 Trivy Operator 一部分的 CIS 扫描 Trivy，一款全合一云原生安全扫描器，可以作为 Kubernetes Operator 部署在集群内。无论是 Trivy CLI 还是 Trivy Operator，都支持 CIS Kubernetes 基准扫描及其他多项功能。 快速开始 有多种方式运行 kube-bench。 你可以在 Pod 内运行...

vuln-list-aqua

vuln-list-aqua Avisos de seguridad de Aqua Security...

cloudsploit

Aqua 旗下 CloudSploit - 云安全扫描 快速开始 通用方式 root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker 方式 root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0...

teampcp-supply-chain-attack

Ataque a la cadena de suministro TeamPCP: Guía de análisis técnico y detección CVE-2026-33634 CVSS 9.4 — El ataque a la cadena de suministro CI/CD más impactante de 2026 hasta ahora. Entre el 19 y el 25 de marzo de 2026, el actor de amenazas TeamPCP también rastreado como DeadCatx3, PCPcat,...

scan-cve-2018-8115

root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Herramienta CLI de verificación de imágenes Docker CVE-2018-8115 Para ayudar a la comunidad a mantenerse segura, en Aqua...

aqua-checksums

aqua-checksums Monitoreo externo de integridad de la cadena de suministro para los proyectos de código abierto de Aqua Security. Qué hace este repositorio Este repositorio monitorea continuamente la integridad de los artefactos publicados de Aqua Security imágenes de contenedor, releases de GitHu...

tfsec

📣 Migración de tfsec a Trivy Como parte de nuestro objetivo de ofrecer una solución integral de seguridad de código abierto para todos, hemos estado consolidando todos nuestros esfuerzos relacionados con el escaneo en un solo lugar, y ese lugar es Trivy. Durante el último año, tfsec ha sentado la...

trivy-plugin-aqua

trivy-plugin-aqua Trivy-Plugin für die Integration mit der Aqua Security SaaS-Plattform Verwendung Trivys Optionen müssen nach -- übergeben werden. Trivy erhält ein Zielverzeichnis, das IaC-Dateien enthält. Legen Sie das Aqua-Plugin als aktuelles Standard-Plugin von Trivy fest, indem Sie eine...

CVE-2026-55569

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

CVE-2026-55569

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:36+00:00| published-proof-of-concept| https://github.com/aquaproj/aqua/security/advisories/GHSA-mf5c-hw34-4hpp...

Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

GHSA-MF5C-HW34-4HPP Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

EUVD-2026-67827

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

PT-2026-83253

Name of the Vulnerable Software and Affected Versions aqua versions prior to 2.60.1 Description In the handler.HandleFile function within pkg/unarchive/archives.go, the software fails to verify that the target of a symlink created via os.Symlink remains within the intended extraction destination....

CVE-2026-57789

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through = 5.1.2...

CVE-2026-57789 WordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through = 5.1.2...