wrongsecrets

OWASP WrongSecrets !Test minikube script \k8s&vault\https://github.com/OWASP/wrongsecrets/actions/workflows/m...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

CVE-2026-10079

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causi...

SUSE CVE-2026-50563

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Container Executor path lets a tenant supply Function.spec.podspec directly; the executor merges it into the...

CVE-2026-15416 Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint

A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' in the deserialization process of user-controlled data from the radapp.io/status annotation on a Kubernetes Deployment. An attacker can cause deletion of container resources belonging t...

PT-2026-46093

Summary Jupyter Enterprise Gateway has a prohibited UID and GID feature that by default prevents launching kernels with UID or GID 0 root. This can be bypassed. It is possible to launch kernels with a prohibited UID and/or GID by using a specially crafted KERNEL UID or KERNEL GID value. The featu...

BIT-FLUX-2022-36035 Flux CLI Workload Injection

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...

CVE-2025-55670 BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability

On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Omni information leakage vulnerability

omni is a Kubernetes deployment tool open-sourced by Sidero Labs, Inc. An information disclosure vulnerability exists in omni versions prior to 1.1.5 and prior to 1.0.2, which stems from an API that may disclose sensitive information...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

CVE-2025-27403

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azu...

Git credentials are exposed in Atlantis logs

Summary Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Atlantis logs contains GitHub credentials tokens ghs... when they are rotated. Thi...

io.quarkus:quarkus-minikube-deployment (1.8.1.final), io.quarkus:quarkus-openshift-deployment (1.8.1.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.8.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.8.1.final -...

io.automatiko.quarkus:automatiko-operator-deployment (0.18.0), io.quarkus:quarkus-kind-deployment (2.11.1.final) +2 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.11.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.11.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.18.0 -...

io.automatiko.quarkus:automatiko-operator-deployment (>=0.30.0, <=0.33.0), io.quarkiverse.helm:quarkus-helm-deployment (>=1.0.1, <=1.2.1) +7 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (>=3.0.0.alpha1, <=3.7.2)

io.quarkus:quarkus-kubernetes-deployment MAVEN version =3.0.0.alpha1, =0.30.0, =1.0.1, =1.0.1, =6.0.0.cr1, =6.0.0.cr1, =6.0.0, =3.0.0.alpha1, =3.0.0.alpha1, =3.0.0.alpha1, =3.7.2 Source cves: CVE-2024-1979 Source advisory: OSV:GHSA-7G97-7R3C-5CC6...

io.automatiko.quarkus:automatiko-operator-deployment (0.5.0), io.quarkus:quarkus-minikube-deployment (1.13.4.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.13.4.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.5.0 -...

io.quarkus:quarkus-minikube-deployment (1.9.1.final), io.quarkus:quarkus-openshift-deployment (1.9.1.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.9.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.9.1.final -...

io.quarkus:quarkus-minikube-deployment (1.7.1.final), io.quarkus:quarkus-openshift-deployment (1.7.1.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.7.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.7.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.7.1.final -...