popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

teatime

=========================================== Teatime - A Blockchain RPC Attack Framework .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime...

CVE-2022-3294

Exploit Reference: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf Enumeration: ...

Absolutely-Positively-NOT-Hacking-Back-with-Pcap

Absolutely Positively NOT Hacking Back with Pcap Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control Nodes This was presented at TheSAS2019: https://www.youtube.com/watch?v=Z1-4-amGdaM...

CVE-2024-10220-githooks

CVE-2024-10220 Test ref https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

cowcloud

CowCloud a serverless solution to distribute work-loads in AWS CowCloud was originally created to run recon tools and vulnerability scans in a distributed way; for example, one use case might be by bug bounty hunters. This solution is intended to abstract end users from the underlying work requir...

EUVD-2026-123350

Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...

TED

TED TED: Abusing Tunnel Nodes and IPv6 Extension Headers for DDoS Attacks...

PT-2026-145118

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p19 Checkmk versions prior to 2.4.0p40 Checkmk version 2.3.0 Description An argument injection flaw exists in the Kubernetes special agent. A user with permissions to edit rules in at least one folder can write...

n8n-function-vm2

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · n8n-function-vm2 Write-up: https://abraxaslabs.tech/research/n8n-function-vm2 n8n-function-vm2 n8n 2.42.0 - n8n GmbH GHSA-j4p8-h8mh-rh8q moved n8n-nodes-base.code onto the JS task-runner child. Production spawn adds...

web3-decoder

Web3 Decoder Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks like Polygon, Arbitrum, BSC... Download & Install Download...

PT-2026-144860

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 29.2 Bitcoin Core versions prior to 30.0 Description An issue exists that could lead to a block processing stall caused by witness malleation. Witness malleation refers to the ability to change the witness data o...

PT-2026-144861

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 30.0 Bitcoin Core versions prior to 29.2 Bitcoin Core versions prior to 28.3 Description Nodes using optional whitelist settings may incorrectly grant permissions to all incoming Tor peers if the configured IP...

PT-2026-144862

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions 28.0 through 28.2 Bitcoin Core versions 29.0 through 29.1 Description A high-severity issue exists where a mining node may become unable to produce valid block templates following a chain reorganization reorg, a process...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

CVE-2026-123815 pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, UnTar.safeextractall in src/pyload/plugins/extractors/UnTar.py validates archive member paths and link targets but does not call TarInfo.isdev to reject special tar member types before calling...

CVE-2026-123815 pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, UnTar.safeextractall in src/pyload/plugins/extractors/UnTar.py validates archive member paths and link targets but does not call TarInfo.isdev to reject special tar member types before calling...

CVE-2026-102356 Kroki Mermaid companion SSRF via flowchart image URLs

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-65165

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...

CVE-2026-65165

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...