Kube API Namespaces Detection

Scans for kube namespaces !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube namespaces.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetesnamespacelist, validatejsonprobe class ModuleScanner,...

Kube API Secrets Detection

Scans for kube secrets endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube secrets endpoint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetessecretlist, validatejsonprobe class ModuleScanne...

Kube API Services Detection

Scans for kube services !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetesservicelist, validatejsonprobe class ModuleScanner, Httpclient:...

Kube API Nodes Detection

Scans for kube nodes !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube nodes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikekubernetesnodelist, validatejsonprobe class ModuleScanner, Httpclient: info =...

Kube API Pods Detection

Scans for kube pods !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube pods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kube API Pods Detection', 'description': 'Scans for kube pods', 'author':...

Kube API Deployments Detection

Scans for kube deployments !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kube deployments.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kube API Deployments Detection', 'description': 'Scans for kube...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.27 security and extras update

Red Hat OpenShift Container Platform release 4.20.27 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

RHCOS 4 : Red Hat build of MicroShift 4.14.0 (RHSA-2023:5008)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5008 advisory. - kube-apiserver: PrivEsc CVE-2023-1260 - kube-apiserver: Bypassing policies imposed by the ImagePolicyWebhook admission plugin...

OESA-2026-2162 kubernetes security update

Container cluster management. Security Fixes: A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this...

kube-apiserver DoS

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

MiracleLinux 8 : container-tools:4.0 (AXSA:2022-4429:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4429:01 advisory. cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 golang: crash in a golang.org/x/crypto/ssh server CVE-2022-27191 runc...

EUVD-2022-6034

Malicious code in bioql PyPI...

EUVD-2024-2135

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-3294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and...

Linux Distros Unpatched Vulnerability : CVE-2022-3172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client...

CVE-2024-22032

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members for projects...

CBL Mariner 2.0 Security Update: cri-o (CVE-2022-1708)

The version of cri-o installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1708 advisory. - A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with...

CVE-2023-5408 Openshift: modification of node role labels

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

kube-apiserver: PrivEsc

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch...

SUSE SLES15 / openSUSE 15 Security Update : conmon (SUSE-SU-2022:4635-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4635-1 advisory. conmon was updated to version 2.1.5: don't leak syslogidentifier logging: do not read more that the buf size logging: fix erro...