247 matches found
overlord
Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: apisix-ingress-controller, cluster-api-aws-controller, rke2-cloud-provider, rancher-webhook, kubescape-operator, tekton-chains, kube-vip-cloud-provider, istio, kubernetes-csi-external-attacher, cass-operator, calico, spqr, opentelemetry-operator,...
CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7
CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7. A patched version of the package is available...
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: nri-mssql, prometheus-alertmanager-fips, rancher-fleet-fips, rke2-runtime-fips, docker-machine-driver-linode, crossplane-provider-aws-detective, opensearch-k8s-operator, nri-haproxy, kubeflow-fips, tbot, ksops-fips, sftpgo-plugin-geoipfilter, buildah-fips,...
GO-2026-5973 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider-fips, rke2-cloud-provider...
GO-2026-5973 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: apisix-ingress-controller, gatus, gostatsd, rancher-webhook, dapr, bento, kubescape-operator, tekton-chains, crossplane-provider-aws-cloudfront, argo-events, prometheus-adapter, zarf, timoni, aws-node-termination-handler, istio, kube-bench, step-issuer, flannel,...
GO-2026-6061 vulnerabilities
Vulnerabilities for packages: apisix-ingress-controller, gatus, rke2-cloud-provider, prometheus-adapter, step-issuer, octo-sts, dynamic-localpv-provisioner, kubernetes-csi-external-provisioner, amazon-k8s-cni, node-feature-discovery, goreleaser, docker-cli-buildx,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: gatus, apko, tekton-chains, crossplane-provider-aws-cloudfront, argo-events, zarf, flux-source-controller, istio, step-issuer, ko, crossplane-provider-aws-eks, terraform-provider-acme, traefik, kots, docker-cli-buildx, docker-compose,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: gostatsd, gatus, cfssl, bento, http-echo, kubescape-operator, kyverno-policy-reporter-ui, crossplane-provider-aws-cloudfront, kube-vip-cloud-provider, docker-credential-ecr-login, timoni, kube-bench, kubernetes-csi-external-attacher, pvc-autoresizer, hydra, flannel,...
GO-2025-3849 vulnerabilities
Vulnerabilities for packages: gatus, rke2-cloud-provider, aws-node-termination-handler, step-issuer, aws-nuke, dynamic-localpv-provisioner, kubernetes-csi-external-provisioner, amazon-k8s-cni, docker-cli-buildx, metallb, k8ssandra-operator, falcosidekick, fixuid, mongo-tools, eksctl, dgraph,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: tempo, tekton-chains, argo-events, kube-bench, ko, cis-operator, kubernetes-csi-driver-nfs, docker-credential-gcr, delve, kubernetes-csi-external-health-monitor, hubble, mockgen, docker-cli-buildx, aws-privateca-issuer, cloud-sql-proxy, grafana-alloy,...
Malicious code in @servicetitan/examples (npm)
npm/@servicetitan/examples is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CVE-2026-67349 OpenCost < 1.121.0 Unauthenticated Helm Values Exposure and Admin Bypass
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELMVALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMINTOKEN is unset, allowing unauthenticated attackers to modify GCP servic...
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6
CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...
CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7
CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7. A patched version of the package is available...
CVE-2026-54250 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider-fips, rke2-cloud-provider...