harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2024-23653

root@kitploit: syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status root@kitploit: sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. root@kitploit: ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. ...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor nicht autorisiert Details zur Sicherheitslücke siehe Stack Community Verwendung root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Optionen root@kitploit: -u URL, --url URL Ziel-URL z.B. http://example.com -h, --help Hilfemeldung anzeigen u...

CVE-2019-16097

CVE-2019-16097 Principio della vulnerabilità di creazione non autorizzata di amministratore in Harbor, docker e poc basato su pocsuite framework...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, portieris, vcluster, cri-tools, prometheus-operator, azure-workload-identity-webhook, sonobuoy, newrelic-infra-operator, kwok, kubernetes-csi-driver-hostpath, k6, hubble, cluster-api-azure-controller, frp, dagdotdev, kserve-rest-proxy,...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3607 vulnerabilities

Vulnerabilities for packages: tailscale, zitadel, harbor, harbor-fips...

GO-2024-2958 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...

GO-2025-3585 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3823 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: zot, buildah, skopeo...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562 FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

EUVD-2026-44749

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562

CVE-2026-50562 describes a supply-chain risk in FastGPT where, at commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted PR code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged workflo...