GCP Cloud SQL Instances

Enumerate Cloud SQL instances in the current GCP project !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Cloud SQL Instances", "description": "Enumerate Cloud SQL instances in t...

GCP Cloud SQL Connection Info Loot

Extract Cloud SQL connection endpoints, users, SSL material, and proxy connection strings !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Cloud SQL Connection Info Loot", "description":...

GCP Public Exposure

Detect publicly exposed GCP resources IAM, storage, firewalls, SQL, BigQuery !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Public Exposure", "description": "Detect publicly exposed GCP...

CVE-2026-39821 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, victoriametrics-operator, spark-operator, kine, src, crossplane-provider-aws-elasticache, sops, kserve-rest-proxy, influx, local-static-provisioner, k6, argo-cd, kuma, kubernetes-csi-node-driver-registrar, spicedb-operator, sqlexporter,...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, victoriametrics-operator, spark-operator, kine, src, crossplane-provider-aws-elasticache, sops, kserve-rest-proxy, influx, local-static-provisioner, k6, argo-cd, kuma, kubernetes-csi-node-driver-registrar, spicedb-operator, sqlexporter,...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: drone-fips, conftest-fips, crossplane-provider-aws-redshift-fips, crossplane-provider-azure-keyvault, containerd, gotrue-fips, crossplane-provider-aws-s3control, hydra-fips, apm-server-fips, eksctl, vault-fips, kafkaexporter-fips, gitlab-rails-ce-fips,...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, aws-otel-collector, minio, keda, prometheus-pushgateway, k8sgpt, grafana, loki, node-problem-detector, cloud-sql-proxy, certificate-transparency, karma, opentelemetry-collector-contrib, jaeger, amazon-cloudwatch-agent-operator, istio,...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: istio-fips, cloudzero-agent-fips, minio-object-browser-fips, jaeger-fips, google-cloud-otel-ops-collector, nrdot-collector-k8s, loki-fips, trillian-fips, mc-fips, cloud-sql-proxy, agentbeat, keda-fips, mcp-grafana, aws-otel-collector, elastic-agent, keda,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, aws-otel-collector, minio, keda, prometheus-pushgateway, k8sgpt, grafana, loki, node-problem-detector, cloud-sql-proxy, certificate-transparency, karma, opentelemetry-collector-contrib, jaeger, amazon-cloudwatch-agent-operator, istio,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: istio-fips, cloudzero-agent-fips, minio-object-browser-fips, jaeger-fips, google-cloud-otel-ops-collector, nrdot-collector-k8s, loki-fips, trillian-fips, mc-fips, cloud-sql-proxy, agentbeat, keda-fips, mcp-grafana, aws-otel-collector, elastic-agent, keda,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, grafana-pyroscope, minio, keda, prometheus-pushgateway, loki, cloud-sql-proxy, certificate-transparency, karma, jaeger, istio, minio-operator, mc, telegraf, trillian, tempo, datadog-agent, minio-object-browser, mcp-grafana, splunk-otel-collector...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, grafana-pyroscope, minio, keda, prometheus-pushgateway, loki, cloud-sql-proxy, certificate-transparency, karma, jaeger, istio, minio-operator, mc, telegraf, trillian, tempo, datadog-agent, minio-object-browser, mcp-grafana, splunk-otel-collector...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: oras, q, conftest-fips, longhorn-manager, xeol, commercial-chainloop-backend, k8ssandra-client-fips, go-discover-fips, docker-credential-acr-env-fips, cloud-provider-aws, google-cloud-otel-ops-collector, crossplane-provider-aws-ecr, custom-pod-autoscaler, nri-redis,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: conftest-fips, longhorn-manager, k8ssandra-client-fips, go-discover-fips, google-cloud-otel-ops-collector, crossplane-provider-aws-ecr, promxy-fips, containerd, crossplane-provider-aws-sns-fips, terraform-provider-random-fips, hydra-fips, apm-server-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: oras, q, conftest-fips, longhorn-manager, helm-docs, k8ssandra-client-fips, nri-redis, go-discover-fips, docker-credential-acr-env-fips, cloud-provider-aws, google-cloud-otel-ops-collector, crossplane-provider-aws-ecr, promxy-fips, syncthing-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: oras, q, conftest-fips, longhorn-manager, helm-docs, k8ssandra-client-fips, nri-redis, go-discover-fips, docker-credential-acr-env-fips, cloud-provider-aws, google-cloud-otel-ops-collector, crossplane-provider-aws-ecr, promxy-fips, syncthing-fips,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: nova, grafana-alloy-fips, timoni, crossplane-provider-aws-ecr, crossplane-provider-aws-kinesis-fips, gitlab-runner, syncthing-fips, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns-fips, goreleaser, opa-envoy, crossplane-provider-aws-memorydb-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: nova, grafana-alloy-fips, timoni, crossplane-provider-aws-ecr, crossplane-provider-aws-kinesis-fips, gitlab-runner, syncthing-fips, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns-fips, goreleaser, opa-envoy, crossplane-provider-aws-memorydb-fips,...

EUVD-2026-5560

The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized for error logs and temporary staging during data imports from GCS and Cloud SQL. This predictability allowed an...

Fedora 42 : golang-github-googlecloudplatform-cloudsql-proxy (2025-582e97b7b4)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-582e97b7b4 advisory. Rebuilt for CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...