320 matches found
Elkeid
Elkeid - Plataforma de Proteção de Carga de Trabalho em Nuvem da Bytedance English | 简体中文 Elkeid é uma solução de código aberto que pode atender aos requisitos de segurança de várias cargas de trabalho, como hosts, contêineres e K8s, e serverless. É derivado das melhores práticas internas da...
CVE-2021-1056
CVE-2021-1056 CVE-2021-1056 é uma vulnerabilidade que eu submeti à NVIDIA PSIRT. Pessoalmente, ela pode levar a altos riscos de segurança em clusters HPC multi-inquilino, especialmente em plataformas de machine learning em nuvem. Este repositório simplesmente demonstra a vulnerabilidade em...
janusec
Janusec Application Gateway / Gateway Applicativo JANUSEC Readme in Inglese Fornire una consegna rapida e sicura delle applicazioni Slide di presentazione: https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf Funzioni principali Le funzioni principali del JANUSEC Application Gatewa...
KubePi JwtSigKey - Admin Authentication Bypass
KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...
openclarity
OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...
rakkess
rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...
CVE-2024-28854 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector...
GHSA-2QPH-QPVM-2QF7 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector...
GHSA-2QPH-QPVM-2QF7 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector...
CVE-2024-28854 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector...
Ingress-Nginx Controller - Remote Code Execution
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...
GHSA-22W5-2FXG-VRWX OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers
Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...
OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers
Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...
CVE-2026-73499 vulnerabilities
Vulnerabilities for packages: kine, dapr...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: knative-operator-fips, crossplane-provider-aws-sfn, kubernetes-csi-external-resizer, crossplane-provider-aws-route53recoveryreadiness, crossplane-provider-aws-mediastore-fips, wave-fips, trivy-k8s-wrapper, cloud-provider-azure, kubernetes-dashboard-web, rook,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sfn, crossplane-provider-aws-route53recoveryreadiness, cert-manager-webhook-pdns, cert-manager-istio-csr-fips, moby-ryuk, crossplane-provider-aws-globalaccelerator-fips, smarter-device-manager-fips, zabbix, cilium-certgen, clickhouse-backup,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sfn, crossplane-provider-aws-route53recoveryreadiness, cert-manager-webhook-pdns, cert-manager-istio-csr-fips, moby-ryuk, crossplane-provider-aws-globalaccelerator-fips, smarter-device-manager-fips, zabbix, cilium-certgen, clickhouse-backup,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: knative-operator-fips, crossplane-provider-aws-sfn, kubernetes-csi-external-resizer, crossplane-provider-aws-route53recoveryreadiness, crossplane-provider-aws-mediastore-fips, wave-fips, trivy-k8s-wrapper, cloud-provider-azure, kubernetes-dashboard-web, rook,...