CVE-2018-1002105

CMPT733-Group110x90 CVE-2018-1002105 팀원 : Abhishek Rungta, Shubham Saini, Siddhant Sood 환경 설정 linux VM 예: Ubuntu 20.04 로컬 kubernetes 배포용 Minikube 다음의 이전 버전 중 하나1.0.x— 1.9.x, 1.10.0—1.10.10,1.11.0—1.11.4,1.12.0—1.12.2 익스플로잇 실행 가상 박스 이미지.ova 파일를 제공했습니다. 다운로드하여 VM을 생성하세요. 제공된 ova는 docker v18.09 및...

martian-packets

마션 패킷 원시 TCP/IP 패킷을 제작하는 데 사용할 수 있는 파이썬 스크립트가 포함된 저장소입니다. 쿠버네티스kube-proxy: CVE-2020-8558에서 공개된 취약점에 따른 마션 패킷을 테스트하는 데 사용됩니다. 이 PoC는 pod - node호스트 localhost 경계 우회를 다룹니다. 취약점의 node - node 부분에 대한 간단하고 강력한 PoC는 여기를 참조하세요. 패킷 제작 크레딧:...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.3-rails, gitlab-rails-ce-fips, ruby3.2-rails, pact-broker-docker-fips, kube-logging-operator, ruby3.4-rails, gitlab-rails-ce, ruby4.0-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.3-rails, gitlab-rails-ce-fips, ruby3.2-rails, pact-broker-docker-fips, kube-logging-operator, ruby3.4-rails, gitlab-rails-ce, ruby4.0-rails...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, kube-logging-operator, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, kube-logging-operator, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, kube-logging-operator, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...

AZL-99246 CVE-2026-84304 affecting package kube-vip-cloud-provider 0.0.10-8

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CLEANSTART-2026-SK94653 Security fixes in kube-state-metrics-fips 2.20.0-r1

Package kube-state-metrics-fips version 2.20.0-r1 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-OJ80990 Security fixes in kube-state-metrics-fips 2.20.0-r2

Package kube-state-metrics-fips version 2.20.0-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-WT90810 Security fixes in kube-state-metrics 2.20.0-r1

Package kube-state-metrics version 2.20.0-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g, CVE-2026-41178...

AZL-98376 CVE-2026-37236 affecting package kube-vip-cloud-provider 0.0.10-8

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui-fips, kube-metrics-adapter-fips, kube-metrics-adapter, falcosidekick-ui, temporal, listmonk, temporal-ui-server-fips, temporal-ui-server, temporal-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: falcosidekick-ui-fips, kube-metrics-adapter-fips, kube-metrics-adapter, falcosidekick-ui, temporal, listmonk, temporal-ui-server-fips, temporal-ui-server, temporal-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal, temporal-ui-server...

EUVD-2026-66561

Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator library to matchConditions, allowing a namespace-scoped policy to invoke generator.applynamespace, resources with an arbitrary...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui-fips, kube-metrics-adapter-fips, kube-metrics-adapter, falcosidekick-ui, temporal, listmonk, temporal-ui-server-fips, temporal-ui-server, temporal-fips...

CVE-2026-66788

CVE-2026-66788 is a flaw in Lighthouse , a Kubernetes multi-cluster networking component. An attacker who compromises a spoke cluster can exploit an attacker-controlled label or annotation on the broker object to determine the destination namespace for resource injection. This allows injection of...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, azure-service-operator, cluster-api-aws-controller, kubernetes-csi-external-provisioner, rancher, kuma, k8ssandra-client, cluster-api-provider-vsphere, keda, kwok, vcluster, external-secrets-operator, spicedb, kube-vip-cloud-provider,...

CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8

CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...