Lucene search
+L

64 matches found

Kitploit
Kitploit
•added 2026/09/25 6:01 a.m.•13 views

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – hostPath にマウントされた Kubernetes Service Account トークン プログラムコード(YAML + Python エクスプロイト) root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: ap...

6.5CVSS6.1AI score0.00163EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/09/22 1:58 p.m.•7 views

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

9.4CVSS5.8AI score0.00273EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/02 12:59 a.m.•13 views

SUSE CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS5.9AI score0.00273EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/01 12:17 p.m.•12 views

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS0.00273EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/01 11:34 a.m.•21 views

CVE-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS5.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•0 views

CVE-2026-84200: Improper Access Control

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

9.4CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•23 views

PT-2026-84161

Name of the Vulnerable Software and Affected Versions Kyverno versions v1.9.0 through v1.12.7 Description A flaw exists in the policy exception handling when a policy is set to enforce mode and combined with two PolicyExceptions. The system incorrectly allows a less restrictive exception to take...

9.4CVSS5.9AI score0.00273EPSS
SaveExploits0References5
Chainguard
Chainguard
•added 2026/08/14 8:24 a.m.•29 views

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: spark-operator, rancher-webhook-fips, ip-masq-agent, aws-ebs-csi-driver, local-static-provisioner, aws-efs-csi-driver, rancher-webhook, argocd-image-updater, argocd-image-updater-fips, kubernetes, kubernetes-csi-driver-hostpath, aws-efs-csi-driver-fips,...

5.7AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:24 a.m.•32 views

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, eks-distro, argo-cd-fips, longhorn-manager, longhorn-manager-fips, azuredisk-csi, harvester-fips, cluster-autoscaler-fips, longhorn-share-manager, rancher-system-agent, azurefile-csi-fips, kubernetes-csi-driver-hostpath, azurefile-csi, harvester,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:24 a.m.•26 views

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•24 views

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, spicedb, grpc-health-probe, kwok, kubernetes-csi-driver-hostpath, fulcio, falcosidekick, dbmate, opentelemetry-collector, certificate-transparency, melange, minio, sops, trivy, hubble-ui, k3s, step, pulumi-language-dotnet, opa,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•22 views

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater, cri-tools, spark-operator, local-static-provisioner, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, k8s-device-plugin, ip-masq-agent, kubeflow-pipelines, nodetaint...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•28 views

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, aws-efs-csi-driver, argocd-image-updater, rancher-fleet, argo-rollouts, emissary, local-static-provisioner, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, vcluster, kapp, nodetaint, kubernetes-csi-driver-nfs...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•30 views

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: harbor-cli, cni-plugins, containerd, nri-consul, nri-mysql, cluster-api-helm-controller, kubernetes-csi-driver-hostpath, kind, dive, falcoctl, libnvidia-container, thanos-operator, k3s, conftest, kapp, kyverno-notation-aws, kpt, eksctl, kapp-controller,...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/08/04 1:29 a.m.•27 views

Exploit for CVE-2026-21008

--- CVE-2026-21008 – Kubernetes Service Account Token Mounte...

6.5CVSS5.6AI score0.00163EPSS
SaveExploits1
CVE
CVE
•added 2026/07/16 9:59 p.m.•111 views

CVE-2026-44180

CVE-2026-44180 affects Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be bypassed to run kernels as root by supplying KERNEL_UID/KERNEL_GID values with whitespace. Affected versions: 2.0.0rc1 through

9.8CVSS6.4AI score0.00715EPSS
SaveExploits1References2Affected Software1
Wolfi
Wolfi
•added 2026/07/02 8:21 p.m.•38 views

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

3.1CVSS5.7AI score0.00314EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/07/02 8:21 p.m.•45 views

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

5.7AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/05/28 4:41 p.m.•16 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS5.8AI score0.00387EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/05/11 4:15 p.m.•22 views

Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...

8.7CVSS6AI score0.00387EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder