Unlearnable-Clusters

Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples Código relativo a "Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples", CVPR2023. Preprocesamiento Primero, ejecuta preprocess.py para renombrar el directorio del conjunto de datos. python preprocess.py --config...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

hayat

Hayat Google Cloud Platform 审计与加固脚本 "Hayat" 是什么意思？ 嗯，老实说，我很难找到一个独特的名字。"Hayat" 是一个土耳其语单词，在英语中意为"生命"，同时也是我侄女的名字。准备好见她了吗？ 😍 😍 😍 Hayat 是一个用于 Google Cloud Platform 服务的审计与加固脚本，涵盖的服务包括： 身份与访问管理 日志记录与监控 网络 虚拟机 存储 Cloud SQL 实例 Kubernetes 集群 目前仅支持以上服务。 身份与访问管理 确保使用企业登录凭据而非 Gmail 账户。 确保每个服务账户仅使用 GCP...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

CVE-2020-8554

使用 Policy Controller 缓解 CVE-2020-8554 本仓库包含用于 Policy Controller 的配置文件，Policy Controller 基于开源项目 OPA Gatekeeper，用于阻止 Kubernetes Service 被设置为公网 IP 访问。 此问题的安全公告 指出： 在 Kubernetes 中发现了一个安全性问题，影响多租户集群。如果潜在攻击者已经能够创建或编辑 Service 和 Pod，那么他们可能能够拦截集群中其他 Pod（或节点）的流量。 此问题被评定为中危...

FACT

取证痕迹收集工具 概述 FACT 是一款用于从云端或本地运行的机器集群中收集、处理和可视化取证数据的工具。 部署 对于基本的单节点部署，我们推荐使用 Docker 和 Docker Compose。首先，阅读 docker-compose.yaml 了解配置和要求。 然后，使用以下命令启动堆栈： docker-compose up -d 更多详情和其他部署方法请参阅安装指南。 使用 FACT 请查阅用户指南。 开发 关于设置开发环境、代码检查和测试的详情，请参阅开发者文档。 截图...

kubeclarity

!IMPORTANT KubeClarity 已被弃用，由 openclarity/openclarity 接替。 查看发布声明了解更多信息。 此项目不再接收更新。我们建议您迁移。 KubeClarity 是一个用于检测和管理容器镜像和文件系统的软件物料清单 SBOM 及漏洞的工具。它扫描运行时 K8s 集群和 CI/CD 管道，以增强软件供应链安全性。 目录 为何？ SBOM 和漏洞检测挑战 解决方案 功能 集成的 SBOM 生成器和漏洞扫描器 架构 开始使用 KubeClarity 后端 使用 Helm 安装 使用 Helm 卸载 在本地构建并运行（含演示数据） CLI 安装 SBO...

CVE-2018-4878-

-cms 服务器集群批量识别cms,批量找备份，批量注入。VIP群版备份...

CVE-2023-28432_docker

CVE-2023-28432docker 用于CVE-2023-28432的测试环境，MinIO集群中的信息泄露。 这些目录提供了MinIO集群的不同版本/配置： 目录| 说明 ---|--- leaked-key| 可被攻击的实例，使用了（已弃用的）MINIOACCESSKEY环境变量 leaked-password| 可被攻击的实例，使用了MINIOROOTPASSWORD环境变量。 no-password| 可被攻击的实例，如果未设置密码则使用默认凭据 not-vulnerable| 安全的实例 not-vulnerable-default-pw|...

mks-copy-fail-mitigation

DaemonSets de mitigación de Copy Fail DaemonSets para corregir las vulnerabilidades de la familia Copy Fail en todos los nodos worker de los clústeres MKS. Contenido CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Descripción de la...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.6 security update

Multicluster Global Hub v1.6.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

DEBIAN-CVE-2026-98139

In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfsclusterfreefromrlnolock adds a run's length to nrfreed whenever the error bookkeeping condition is false, which includes cases where ntfsbitmapclearrun actually...

CVE-2026-98139

In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfsclusterfreefromrlnolock adds a run's length to nrfreed whenever the error bookkeeping condition is false, which includes cases where ntfsbitmapclearrun actually...

PT-2026-98801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs cluster free from rl nolock function incorrectly increments the nr freed counter even when ntfs bitmap clear run fails. This occurs...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.7.3 security update

Multicluster Global Hub v1.7.3 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2026-92778: Protection Mechanism Failure

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form endpoints to start and stop the recurring election scheduler, disrupting leadership across managed Kafka clusters...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectorsperclusters When the NTFS BOOT sectorsperclusters field is greater than 0x80, it represents a shift value. Ensure that the shift value is not too large before using it the maximum cluster size for...

SUSE CVE-2026-72159

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.14 security update

Red Hat multicluster engine for Kubernetes v2.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...