847 matches found
hayat
Hayat Google Cloud Platform Auditing & Hardening Script What does that mean "Hayat"? Well, I had a hard time finding a unique name, honestly. "Hayat" is a Turkish word which means "Life" in English and also my niece's name. Ready to meet her? 😍 😍 😍 Hayat is a auditing & hardening script for Googl...
dockle
Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...
red-kube
Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...
Unlearnable-Clusters
Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples Code relative to "Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples", CVPR2023. Preprocess First, run preprocess.py to rename the dataset directory python preprocess.py --config config/preprocess.yaml -f rename...
mks-copy-fail-mitigation
Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...
FACT
Forensic Artefact Collection Tool Overview FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for...
popeye
Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...
CVE-2018-4878-
-cms Server cluster batch identification of cms, batch backup search, batch injection. VIP group version backup...
CVE-2023-28432_docker
CVE-2023-28432docker Test environments for CVE-2023-28432, information disclosure in MinIO clusters. The directories provide different versions / configurations for a MinIO cluster: Directory| Remark ---|--- leaked-key| Vulnerable instance, using the deprecated MINIOACCESSKEY environment variable...
CVE-2020-8554
Mitigate CVE-2020-8554 with Policy Controller This repository contains configuration files for using Policy Controller, which is based on the open source OPA Gatekeeper project, to block Kubernetes Services from public IP access. The security advisory for this issue states: A security issue was...
CVE-2026-127077 OpsTree BuildPiper before 2.7.0 Authorization Bypass via Environment Creation API
OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with clusterid and namespaces values. Attackers can modify requests to POST /api/v1/project/projectid/env/ to target...
CVE-2026-127077
OpsTree BuildPiper versions prior to 2.7.0 are vulnerable to an authorization bypass in the Environment Creation API. The flaw allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with cluster_id and namespaces values during a POST request to /api/v1/pr...
EUVD-2026-124372
Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability that allowed authenticated non-administrative users to modify Windows DHCP filter-list configurations across unauthorized clusters...
openclarity
OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...
SUSE CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...
CVE-2026-88810
A privilege escalation vulnerability exists in the Rancher Manager role-based access control system. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces across all managed downstream clusters but lacks the privilege-escalation validation applied to othe...
CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...
CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...
CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...
