harbor

팀 소개 충칭 주궁격 보안 팀 은 오픈소스 보안 도구를 공유하는 데 힘쓰고 있으며, 연구 방향은 레드-블루 대결, 웹 보안, 모바일 보안, 보안 개발, 기업 보안 구축, IoT/산업 제어 보안/AI/양자 보안 등 여러 분야를 포괄합니다. 보안에 관심이 있는 분들은 저희를 팔로우해 주세요. harbor CVE-2022-46463 완전 자동 다운로드 스크립트 실제 공방 훈련이나 공급망 공격에서 harbor 시스템을 자주 접하게 됩니다. 개발자 권한 오류 설정이나 이미지를 공개해야 하는 등의 이유로, 이때 전자동 기능을 갖춘 스크립...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2024-23653

root@kitploit: syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status root@kitploit: sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. root@kitploit: ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. ...

CVE-2026-8862

IBM Netezza Software versions 11.3.0.3 through Interim Fix 002 contain hardcoded credentials in the application source code, granting unauthorized network access to the associated container registry . The exposed secret allows attackers to pull private container images , potentially revealing pro...

EUVD-2026-70745

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor 무단 인증 취약점 취약점 상세 내용은 Stack 커뮤니티에서 확인 가능합니다. 사용 root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 옵션 root@kitploit: -u URL, --url URL Target URL e.g. http://example.com -h, --help Show help message and exit docker pull xxx 명령어가 직접 표시되었습니다...

CVE-2019-16097

CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: kube-bench, eksctl, rancher-helm, haproxy-ingress, nri-haproxy, weaviate, metrics-agent, crossplane-provider-keycloak, jaeger-operator, helm-mapkubeapis, newrelic-infra-operator, fscrypt, chart-testing, aws-flb-firehose, tailscale, knative-client, nri-apache,...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3607 vulnerabilities

Vulnerabilities for packages: zitadel, harbor-fips, tailscale, harbor...

GO-2024-2958 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, zot, harbor-scanner-trivy-fips...

GO-2025-3585 vulnerabilities

Vulnerabilities for packages: harbor-fips, harbor...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3823 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: zot, buildah, skopeo...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562 FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged...