Lucene search
+L

64 matches found

Kitploit
Kitploit
•added 2026/09/25 6:01 a.m.•13 views

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – hostPath にマウントされた Kubernetes Service Account トークン プログラムコード(YAML + Python エクスプロイト) root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: ap...

6.5CVSS6.1AI score0.00163EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/09/22 1:58 p.m.•7 views

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

9.4CVSS5.8AI score0.00273EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/02 12:59 a.m.•13 views

SUSE CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS5.9AI score0.00273EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/01 12:17 p.m.•12 views

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS0.00273EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/01 11:34 a.m.•21 views

CVE-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS5.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•0 views

CVE-2026-84200: Improper Access Control

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•23 views

PT-2026-84161

Name of the Vulnerable Software and Affected Versions Kyverno versions v1.9.0 through v1.12.7 Description A flaw exists in the policy exception handling when a policy is set to enforce mode and combined with two PolicyExceptions. The system incorrectly allows a less restrictive exception to take...

9.4CVSS5.9AI score0.00273EPSS
SaveExploits0References5
Chainguard
Chainguard
•added 2026/08/14 8:24 a.m.•32 views

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, azuredisk-csi, longhorn-manager-fips, azurefile-csi, rke2-runtime-fips, harvester, eks-distro, cluster-autoscaler-fips, longhorn-manager, longhorn-share-manager, azurefile-csi-fips, harvester-fips, kubernetes-csi-driver-hostpath, rancher-system-agent,...

5.7AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:24 a.m.•29 views

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver-fips, spark-operator, nodetaint, aws-ebs-csi-driver, argocd-image-updater, rancher-webhook, ip-masq-agent, rancher-webhook-fips, local-static-provisioner, kubernetes, kubeflow-pipelines, argocd-image-updater-fips,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:24 a.m.•26 views

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•24 views

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, kaniko, pulumi-language-dotnet, cloudnative-pg, rqlite, smarter-device-manager, kwok, step-ca, sops, step, spegel, ksops, melange, grafana-agent-operator, trivy, kots, k3s, opentelemetry-collector-contrib, temporal, zot, cert-manager-cmctl, spicedb,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•22 views

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: cri-tools, aws-efs-csi-driver, ip-masq-agent, nodetaint, kubeflow-pipelines, spark-operator, kubernetes-csi-driver-hostpath, local-static-provisioner, argocd-image-updater, k8s-device-plugin, kubernetes-dns-node-cache...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•28 views

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, aws-efs-csi-driver, rancher-fleet, kubernetes-csi-driver-nfs, nodetaint, spark-operator, argo-rollouts, kubernetes-csi-driver-hostpath, local-static-provisioner, vcluster, argocd-image-updater, yunikorn-k8shim, emissary, kapp, kubernetes,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•30 views

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, chart-testing, hubble, kpt, controller-gen, cluster-api-provider-vsphere, k3s, dgraph, tkn, mongo-tools, zot, nri-rabbitmq, aws-privateca-issuer, pluto, delve, clickhouse-operator, grafana-alloy, aws-otel-collector, helm-push, rclone, conftest, guac,...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/08/04 1:29 a.m.•27 views

Exploit for CVE-2026-21008

--- CVE-2026-21008 – Kubernetes Service Account Token Mounte...

6.5CVSS5.6AI score0.00163EPSS
SaveExploits1
CVE
CVE
•added 2026/07/16 9:59 p.m.•111 views

CVE-2026-44180

CVE-2026-44180 affects Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be bypassed to run kernels as root by supplying KERNEL_UID/KERNEL_GID values with whitespace. Affected versions: 2.0.0rc1 through

9.8CVSS6.4AI score0.00715EPSS
SaveExploits1References2Affected Software1
Wolfi
Wolfi
•added 2026/07/02 8:21 p.m.•38 views

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

3.1CVSS5.7AI score0.00314EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/07/02 8:21 p.m.•46 views

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

5.7AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/05/28 4:41 p.m.•16 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS5.8AI score0.00387EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/05/11 4:15 p.m.•22 views

Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...

8.7CVSS6AI score0.00387EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder