overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

cloud-middleware-dataset

クラウドミドルウェアデータセット このプロジェクトには、主要なクラウドサービスプロバイダー（Azure、AWS、GCP）で使用されるクラウドミドルウェア（すなわち、クラウドセキュリティプロバイダーによってインストールされるエージェント）が含まれています。...

gibson

Gibson プロセスとネットワーク接続のマッピング、クラウドプロバイダーの識別、ファイアウォールルールの生成を行うネットワーク監視ツール。収集用の軽量エージェント、集約用のサーバー、分析用のパーサーを備えています。 スクリーンショット マシン間の概要 — OSバージョン比較、共有IP検出、全ホストにわたるビーコン候補: ホスト別詳細 — クリティカルアラート EOL OS、nc.exe が不明IPにビーコン: ホスト別詳細 — 警告 ビーコン候補がフラグ: ホスト別詳細 — 正常 異常なし: 機能 コレクター エージェント 🔒 セキュア : オプションのAES-256-GCM暗号化 🗜️...

CVE-2026-83530 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

CVE-2026-83530 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9. A patched version of the package is available...

CVE-2026-84445 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

CVE-2026-84445 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9. A patched version of the package is available...

CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9. A patched version of the package is available...

CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. A patched version of the package is available...

CVE-2026-81869 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-81869 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

AZL-100917 CVE-2026-83530 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

AZL-100935 CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

AZL-99246 CVE-2026-84304 affecting package kube-vip-cloud-provider 0.0.10-8

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-99177 CVE-2026-84304 affecting package cloud-provider-kubevirt 0.5.1-7

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-98376 CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

AZL-98349 CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, rancher-system-agent, yunikorn-k8shim, tkn, cloud-provider-aws, kots, spqr, azure-service-operator, kubernetes, cloud-provider-azure, kuma, openbao, cluster-autoscaler, gatekeeper, kubernetes-csi-external-snapshotter, telegraf, calico,...

CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7

CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7. A patched version of the package is available...

CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8

CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, helm-exporter, gpu-operator, crossplane-provider-aws-batch, trivy-k8s-wrapper-fips, cluster-proportional-autoscaler-fips, terraform-provider-azurerm-fips, crossplane-provider-azure-storagecache, fairwinds-gemini, mongodb-kubernetes-operator-fips,...