Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Кластерный хаос: эксплуатация CVE-2025-59359 для захвата Kubernetes Практическое криминалистическое руководство по CVE-2025-59359 — критической уязвимости внедрения команд ОС в Chaos-Mesh. Узнайте, как злоумышленники захватывают кластеры Kubernetes через мутации GraphQL, а также как обнаруживать,...

cluster-image-scanner

ClusterImageScanner Découvrez les vulnérabilités et les mauvaises configurations des images de conteneurs dans les environnements de production. Introduction Le ClusterImageScanner détecte les images dans un cluster Kubernetes et fournit un retour rapide basé sur divers tests de sécurité. Il est...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

mesh-kridik

mesh-kridik Améliorez la sécurité de votre maillage de services Kubernetes !! mesh-kridik est un vérificateur de sécurité open-source qui effectue diverses vérifications de sécurité sur un cluster Kubernetes avec le maillage de services Istio et produit un rapport de sécurité. Les tests de...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

kubetcd

Kubetcd Wrapper di https://github.com/jpbetz/auger. Automatizza il deployment dei pod scrivendo direttamente in etcd. Include diverse funzioni per la post-esplorazione di etcd compromessi. Avvertenza !WARNING Questa è una PoC, non utilizzarla in un ambiente di produzione. Scrivere direttamente in...

CVE-2026-62440

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

EUVD-2026-63835

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

PT-2026-79328

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper Access Control in the Kubernetes Service CKS plugin allows cross-tenant manipulation of the Kubernetes cluster during the process of adding and removing nodes...

GO-2023-1850 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-4102 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2023-1992 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2023-1709 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2020-0012 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2026-18942

A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could lead to a direct escalation of...

EUVD-2026-55812

A flaw was found in the Data Science Pipelines Operator DSPO. The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wi...

CVE-2026-18608

The vulnerability CVE-2026-18608 affects the Data Science Pipelines Operator (DSPO). Its ClusterRole grants excessive privileges beyond what is needed, including pods/exec and cluster-wide role/binding control. If a DSPO pod is compromised, an attacker could leverage these permissions to achieve ...

EUVD-2026-55810

A flaw was found in the TrustyAI Service TAS deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data and configurations, and inject arbitrary...

PT-2026-69962

Name of the Vulnerable Software and Affected Versions Feast operator affected versions not specified Description A flaw allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to...

PT-2026-60566

Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.19.5 cert-manager versions 1.20.0 through 1.20.2 Description Namespace users can create Challenge resources under acme.cert-manager.io without admission validation that ties the Challenge to an Order, own...