168 matches found
EUVD-2024-38551
Malicious code in bioql PyPI...
EUVD-2024-0307
Malicious code in bioql PyPI...
EUVD-2024-1273
Malicious code in bioql PyPI...
EUVD-2025-28660
Malicious code in bioql PyPI...
EUVD-2025-1661
Malicious code in bioql PyPI...
EUVD-2024-2588
Malicious code in bioql PyPI...
EUVD-2022-7769
Malicious code in bioql PyPI...
EUVD-2023-1825
Malicious code in bioql PyPI...
EUVD-2022-0936
Malicious code in bioql PyPI...
EUVD-2023-2793
Malicious code in bioql PyPI...
EUVD-2024-0386
Malicious code in bioql PyPI...
Exploit for Insufficiently Protected Credentials in Linuxfoundation Containerd
It is an offensive tool for Kubernetes. The repository contains information on various methods to hack and exploit Kubernetes clusters, including articles, videos, and presentations on topics such as securing clusters by eliminating risky permissions, Kubernetes pentest methodology, and container...
CVE-2025-49520 Event-driven-ansible: authenticated argument injection in git url in eda project creation
A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This vulnerability allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift...
CVE-2025-49520
CVE-2025-49520 affects Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to git ls-remote, enabling an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift, this can lead to service accou...
Security Bulletin: NVIDIA AIStore on Kubernetes - June 2025
NVIDIA has released a software update for NVIDIA® AIStore on Kubernetes. To protect your system, download and install this software update from the AIStore on Kubernetes Github Go to NVIDIA Product Security...
kubernetes allows nodes to bypass dynamic resource allocation authorization checks
A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim statuses during pod status updates but fails to...
CVE-2025-22872 affecting package kubernetes for versions less than 1.30.10-7
CVE-2025-22872 affecting package kubernetes for versions less than 1.30.10-7. A patched version of the package is available...
CVE-2022-39272
Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...
Kubernetes IngressNightmare: Wake Up and Fight Back with Microsegmentation
Discover how to defend Kubernetes from Ingress vulnerabilities with microsegmentation and Zero Trust security from Akamai. Stay protected — inside and out...
