CVE-2023-5044

CVE-2023-5044 CVE-2023-5044 的PoC 前提条件 Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC 授予Docker正确的权限 root@kitploit: sudo usermod -aG docker $USER && newgrp docker 使用extraPortMaping和node-labels启动集群，为ingress做准备。 root@kitploit: cat EOF | kind create cluster --config=- kind: Cluster apiVersion:...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, headlamp, ksops, kubelet-csr-approver, flux-notification-controller, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, x509-certificate-exporter, crossplane-provider-aws-cloudwatchlogs,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: atlantis, ipfs-cluster, spqr, kubevela, fulcio, conjur-cli, mockgen, ferretdb, harbor, metacontroller, kwok, sonobuoy, thanos-operator, rootlesskit, opensearch-k8s-operator, mongodb-kubernetes-operator, skaffold, grpcurl, nuclei, smarter-device-manager,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, mattmoor-chainit,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, bazelisk, timestamp-authority, hubble-ui-backend-fips, chisel-fips, mockery, dockerize-fips, wait-for-port, keda, kubernetes-csi-node-driver-registrar-fips, task,...