158 matches found
GHSA-HP87-P4GW-J4GQ vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator, thanos-operator-fips, dynamic-localpv-provisioner-fips...
CVE-2022-28948 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator, thanos-operator-fips, dynamic-localpv-provisioner-fips...
Rip Raw - Small Tool To Analyse The Memory Of Compromised Linux Systems
Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This is not a...
GHSA-8C26-WMH5-6G9V vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kubeflow-fips, kubeflow, dynamic-localpv-provisioner-fips, k3d...
GHSA-CG3Q-J54F-5P7P vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
CVE-2022-21698 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
Kubernetes: Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespaces
Summary: Retrieving ingress-nginx serviceaccount token ingress-nginx allows adding custom snippets of nginx configuration to Kubernetes ingress objects. These snippets can be applied to either the relevant location or server blocks with the following annotations, respectively...
Sifchain: Open S3 Bucket | information leakage
Hi I found an Open S3 Bucket. - POC : aws s3 ls s3://amazon-eks/ Source : https://github.com/Sifchain/sifnode/blob/bebbe9883560bbde4f452f81a2d85bdbc243636a/deploy/rake/dependencies.rake21 regards oos Impact information leakage...
Unauthorized Access Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An unauthorized access vulnerability exists in the Employment Information Management Syste...
Information Leakage Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An information leakage vulnerability exists in the employment information management syste...
SQL Injection Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. A SQL injection vulnerability exists in the Employment Information Management System of...
Kubestriker - A Blazing Fast Security Auditing Tool For Kubernetes
Kubestriker performs numerous in depth checks on kubernetes infra to identify the security misconfigurations and challenges that devops engineers/developers are likely to encounter when using Kubernetes, especially in production and at scale. kubestriker is Platform agnostic and works equally wel...
Information Leakage Vulnerability in Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. There is an information leakage vulnerability in Chengdu ECOSYS Information Industry Co.,...
CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
UBUNTU-CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
Cross site scripting
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
