249 matches found
gibson
Gibson Strumento di monitoraggio di rete che mappa le connessioni processo-rete, identifica i provider cloud e genera regole firewall. Agente leggero per la raccolta, server per l'aggregazione, parser per l'analisi. Screenshot Panoramica tra macchine — confronto versioni OS, rilevamento IP...
overlord
Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...
cloud-middleware-dataset
Cloud-Middleware-Datensatz Dieses Projekt enthält Cloud-Middleware d. h. Agenten, die von Cloud-Sicherheitsanbietern installiert werden, die bei den großen Cloud-Dienstanbietern Azure, AWS und GCP zum Einsatz kommt. Der Cloud-Middleware-Datensatz listet alle Agenten auf, die von den großen...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: spicedb-operator, cluster-api-ipam-provider-in-cluster, zot, metallb, flux-notification-controller, vcluster, opentelemetry-operator, kubernetes-csi-external-resizer, cluster-api-aws-controller, kyverno, flux-helm-controller, emissary, kyverno-notation-aws, kwok,...
CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7
CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7. A patched version of the package is available...
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: nri-apache-fips, container-object-storage-interface-fips, grype-fips, vault-env, crossplane-provider-aws-dataexchange, flagger, azure-aad-pod-identity-mic, rabbitmq-cluster-operator-fips, actions-runner-controller-fips, emqx-exporter-fips,...
GO-2026-5973 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider, rke2-cloud-provider-fips...
GO-2026-5973 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: spicedb-operator, gostatsd, newrelic-infra-operator, nova, stakater-reloader, docker-machine-driver-linode, migrate, cluster-api-ipam-provider-in-cluster, paranoia, db-operator, crossplane-provider-aws-kinesis, manifest-tool, litestream, kubernetes-event-exporter,...
GO-2026-6061 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, grafana-agent-operator, kubernetes-event-exporter, dbmate, step, vcluster, opentelemetry-operator, grafana-alloy, minio-object-browser, terraform-provider-azurerm, gitea, emissary, rancher-machine, distribution, spire-controller-manager,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, docker-machine-driver-linode, crossplane-provider-aws-kinesis, scorecard, zot, flux-notification-controller, falcoctl, cloudflared, nfpm, step, sops, minio, chisel, kyverno, crossplane-provider-aws-cloudwatchlogs,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: gostatsd, newrelic-infra-operator, stakater-reloader, verticadb-operator, dkron, docker-machine-driver-linode, go-licenses, cluster-api-ipam-provider-in-cluster, docker-credential-gcr, falco-no-driver, db-operator, paranoia, crossplane-provider-aws-kinesis,...
GO-2025-3849 vulnerabilities
Vulnerabilities for packages: grafana-agent-operator, dbmate, step, logstash-exporter, harbor-scanner-trivy, gitea, kubernetes-release, kubebuilder, nfs-subdir-external-provisioner, trivy, helm, incert, rke2-cloud-provider, crossplane-provider-sql, fscrypt, kube-metrics-adapter,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nova, migrate, docker-credential-gcr, zot, bom, falcoctl, wgcf, cloud-sql-proxy, kor, grafana-alloy, rancher-system-upgrade-controller, delve, terraform-mcp-server, emissary, nuclei, spire-controller-manager, nri-memcached, steampipe, trivy, gobump,...
Malicious code in @servicetitan/examples (npm)
npm/@servicetitan/examples is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CVE-2026-67349 OpenCost < 1.121.0 Unauthenticated Helm Values Exposure and Admin Bypass
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELMVALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMINTOKEN is unset, allowing unauthenticated attackers to modify GCP servic...
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...
CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7
CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7. A patched version of the package is available...