gatekeeper

Gatekeeper What is Gatekeeper? Gatekeeper is the first open source DDoS protection system. It is designed to scale to any peak bandwidth, so it can withstand DDoS attacks both of today and of tomorrow. In spite of the geographically distributed architecture of Gatekeeper, the network policy that...

gatekeeper

Gatekeeper How is Gatekeeper different from OPA? Compared to using OPA with its sidecar kube-mgmt aka Gatekeeper v1.0, Gatekeeper introduces the following functionality: An extensible, parameterized policy library Native Kubernetes CRDs for instantiating the policy library aka "constraints" Nativ...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

CVE-2021-30657

CVE-2021-30657 A simple POC for CVE-2021-30657 affecting MacOS Vulnerability detail A vulnerability in syspolicyd allows specially crafted application bundle downloaded from internet to bypass foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization. Armed with...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

CVE-2024-23745

CVE-2024-23745 In Notion Web Clipper 1.0.37, a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling t...

CVE-2025-61228

CVE-2025-61228 Alert This issue appears to be worse than the developer suggests, so I don't want this part to be lost in the weeds. The developer noted on their blog: This can only happen if a program running on your system is looking for SuperDuper to perform an update, a real update is presente...

CVE-2019-8656

CVE-2019-8656 CVE-2019-8656 GateKeeper バイパス https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass...

gatekeeper-cve-2020-8554

Gatekeeper constraint for CVE-2020-8554 Install OPA client Follow the instructions. Run unit tests root@kitploit: $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

POC

POC Solo a scopo di ricerca! Una raccolta pubblica di POC & Exploit per le vulnerabilità che ho scoperto. CVE-2022-22583 PackageKit : Un'applicazione potrebbe essere in grado di accedere a file riservati SIP Bypass CVE-2022-26690 PackageKit : Un'applicazione dannosa potrebbe essere in grado di...

CVE-2021-30853

CVE-2021-30853 Ein einfaches POC-Skript zum Testen von CVE-2021-30657, das MacOS betrifft. Diese CVE ermöglicht die Umgehung von Gatekeeper-, Notarisierungs- und XProtect-Prüfungen. Details zur Schwachstelle Diese Schwachstelle tritt auf, wenn du keinen Interpreter definierst oder einen Interpret...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: tekton-chains, flux-helm-controller, openfga, flux-kustomize-controller, metrics-server, kapp-controller, kubernetes-csi-external-attacher, hubble-ui, openbao, pulumi-kubernetes-operator, k3s, kubernetes-csi-external-provisioner, kubescape, istio, kwok,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: linkerd2-fips, consul-k8s-fips, drone-fips, opentofu, kgateway, helm-operator-fips, kubescape, headlamp, vcluster, chaos-mesh, helm-mapkubeapis, ocm-cli-fips, ratify, manifest-tool, chaos-mesh-fips, ratify-fips, oras-fips, cilium-cli, rancher-helm, cloudbeat, kargo,...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: linkerd2-fips, consul-k8s-fips, drone-fips, opentofu, kgateway, helm-operator-fips, kubescape, headlamp, vcluster, chaos-mesh, helm-mapkubeapis, ocm-cli-fips, ratify, manifest-tool, chaos-mesh-fips, ratify-fips, oras-fips, cilium-cli, rancher-helm, cloudbeat, kargo,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: opa-envoy, argocd-image-updater-fips, consul-k8s-fips, drone-fips, kubescape-server-fips, falcoctl-fips, cloudbeat-fips, helm, argo-cd-fips, linkerd2, flux-source-controller-fips, kube-mgmt, rancher-fleet, flux-helm-controller-fips, helm-operator-fips, kgateway,...

GO-2026-4970 vulnerabilities

Vulnerabilities for packages: prometheus, cluster-api, dask-gateway, opentofu, terraform-fips, pulumi-language-yaml, consul, timestamp-authority-fips, azuredisk-csi-fips, knative-operator-fips, nemo, frankenphp-8.2, ocm-cli-fips, gitlab-rails-ce, grafana-alloy, docker, fleet-server-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, syft, flux-source-controller-fips, neuvector-scanner-fips, helm-operator-fips, kubescape, headlamp, beats, helm-mapkubeapis, google-osconfig-agent, gitlab-rails-ce, manifest-tool, docker, helm-diff-fips, cilium-cli, k3s, rancher-helm, cloudbeat, karg...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, syft, flux-source-controller-fips, neuvector-scanner-fips, helm-operator-fips, kubescape, headlamp, beats, helm-mapkubeapis, google-osconfig-agent, gitlab-rails-ce, manifest-tool, docker, helm-diff-fips, cilium-cli, k3s, rancher-helm, cloudbeat, karg...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: consul-k8s, datadog-agent, containerd, kubevela, helm-mapkubeapis, spegel, tw, trivy-operator, rancher, linkerd2, skaffold, k8sgpt, helm-set-status, dagger, scorecard, teleport, rancher-helm, wolfictl, docker-compose, cluster-api-helm-controller, helm, k3s, ctop,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: consul-k8s, argo-cd, trivy-operator, opa, rancher, linkerd2, argocd-image-updater, helm, gatekeeper, gogatekeeper, grafana-operator, conftest, chartmuseum, zot, k8ssandra-client, oras, ratify, helm-operator, zarf, rancher-fleet, falcoctl, cilium-cli, opa-envoy, trivy...