Lucene search
+L

865 matches found

Kitploit
Kitploit
added 2026/09/14 2:52 a.m.64 views

grype

Grype A vulnerability scanner for container images and filesystems...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 2:10 a.m.6 views

layerleak

layerleak the OCI Image Secret Scanner Check CONTRIBUTING.md for contribution guidelines. OCI image secret scanner that works against any public OCI-compliant registry Docker Hub, GHCR, Quay, GCR, MCR, Amazon ECR Public, self-hosted. It analyzes image layers, config metadata, and image history,...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 5:12 p.m.11 views

pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

8.6CVSS7AI score0.18087EPSS
SaveExploits18References3
Kitploit
Kitploit
added 2026/09/13 1:01 p.m.13 views

cosign

cosign 使用 Sigstore 对 OCI 容器(及其他制品)进行签名! Cosign 旨在让签名成为无形的基础设施 。 Cosign 支持: 使用 Sigstore 公共 Fulcio 证书颁发机构和 Rekor 透明日志进行“无密钥签名”(默认) 硬件与 KMS 签名 使用 cosign 生成的加密私钥/公钥对进行签名 在 OCI 注册表中进行容器签名、验证与存储。 自带 PKI 信息 Cosign 是 sigstore 项目的一部分。 我们还使用一个 slack 频道! 点击此处获取邀请链接。 安装 有关 Homebrew、Arch、Nix、GitHub Action 和...

6AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/09/13 12:38 p.m.12 views

dive

dive 一个用于探索 Docker 镜像、层内容以及发现缩小 Docker/OCI 镜像大小方法的工具。 要分析一个 Docker 镜像,只需使用镜像标签/ID/摘要运行 dive: root@kitploit: dive 或者你可以直接通过 Docker 使用 dive: root@kitploit: alias dive="docker run -ti --rm -v /var/run/docker.sock:/var/run/docker.sock docker.io/wagoodman/dive" dive 例如 dive nginx:latest...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 10:02 a.m.8 views

terrier

Terrier Terrier 是一款镜像和容器分析工具,可用于扫描 OCI 镜像和容器,根据其哈希值识别并验证特定文件的存在。关于 Terrier 的详细说明可参见 Heroku 博客:https://blog.heroku.com/terrier-open-source-identifying-analyzing-containers。 安装 二进制文件 如需通过二进制文件安装,请访问 发布页面。 通过 Go 安装 root@kitploit: $ go get github.com/heroku/terrier 从源码构建 通过 Go root@kitploit: $ go bui...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 8:57 a.m.4 views

clair

Clair 注意 : 在开发过程中,main 分支可能处于 不稳定甚至损坏状态 。 请使用 releases 页面而非 main 分支来获取稳定二进制文件。 Clair 是一个开源项目,用于对应用容器(当前包括 OCI 和 docker 格式)中的漏洞进行 静态分析。 客户使用 Clair API 对容器镜像进行索引,然后将其与已知漏洞进行匹配。 我们的目标是实现对基于容器的基础设施安全性的更透明观察。因此,该项目取名为 Clair,源自法语词汇,意为 清晰、明亮、透明 。 文档 包含了关于 Clair 架构和操作的全部说明。 社区 邮件列表: [email protected]...

5.9AI score
SaveExploits0References8
OSV
OSV
added 2026/09/11 9:24 p.m.6 views

CVE-2026-54248 Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...

6.5CVSS5.8AI score
SaveExploits0References5
CVE
CVE
added 2026/09/11 9:24 p.m.13 views

CVE-2026-54248

Doco-CD , a GitOps continuous delivery tool for Docker Compose projects and Swarm stacks, contains an OCI trust-policy bypass prior to version 0.90.1 . A trust-boundary flaw allowed artifact-provided .doco-cd.yml configuration (with oci.verify: false) to override the global OCI_TRUST_POLICY, caus...

6.5CVSS0.0023EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.15 views

PT-2026-90509

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...

6.5CVSS0.0023EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 12:21 p.m.3 views

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible 修复 本 playbook 修复 OCI 上 Linux 实例中的 CVE-2026-31431(也称为 Copy Fail)。 CVE-2026-31431 是 Linux 内核中由 AFALG 用户空间加密 API 使用的 algifaead 实现的一个本地权限提升问题。本 playbook 采用主要修复路径:安装更新后的厂商内核包并重启实例,使其运行已修复的内核。 参考: NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-31431 Copy Fail 披露:https://copy.fail...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/09 9:41 a.m.8 views

CVE-2026-5530

CVE-2026-5530 SSRF en Ollama mediante redirección de registro OCI con exfiltración completa de la respuesta. Informe: https://davidrochester.com/posts/cve-2026-5530 Divulgación Se contactó con Ollama en múltiples ocasiones sin obtener respuesta. Uso Tres modos: enum, exfil y probe. Enum Encuentra...

6.5CVSS6.8AI score0.00297EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 4:20 a.m.10 views

CVE-2026-67620-poc

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

7.7CVSS5.9AI score0.0032EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/09 4:18 a.m.9 views

cve-2026-59891-control-lab

CVE-2026-59891 Regression & Control Lab An isolated hands-on lab and read-only audit project that compares the actual vulnerable and fixed versions of @sigstore/oci with the same input and checks environment-specific exposure conditions. The CVE Reporter for this project is gyubin02...

9.6CVSS5.9AI score0.00473EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/07 11:42 p.m.6 views

kern

kern: a fast, rootless sandbox and virtual resource runtime. Run any workload in a real container, including an agent's tool-call or AI-generated code. A real, kernel-enforced container in 3.5 ms, out of one static binary with no daemon. 0 RAM at rest · no daemon, no socket, nothing to start · on...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 3:37 p.m.7 views

CVE-2026-27771

CVE-2026-27771 — Gitea Container Registry Auth Bypass CVSS: N/A unpublished Affects: Gitea Disclaimer: This proof-of-concept is provided for educational and authorized security research purposes only. Unauthorized access to computer systems is illegal. The authors are not responsible for any misu...

8.2CVSS7.8AI score0.01393EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.9 views

RHEL 10 : buildah (RHSA-2026:63332)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63332 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

8.8CVSS7AI score0.00798EPSS
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/03 12:26 a.m.12 views

CVE-2026-67620-poc — Updated!

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

7.7CVSS6AI score0.0032EPSS
SaveExploits2References3
OSV
OSV
added 2026/09/03 12:00 a.m.4 views

ALSA-2026:63332 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

8.8CVSS7AI score0.00798EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.14 views

PT-2026-84120

В свежем релизе cri-o исправили две уязвимости, одна из которых имеет критический уровень и может привести к побегу из контейнера. CVE-2026-62146 позволяет пользователю с правом создавать Pods отравить сохранённое состояние sandbox через произвольные annotations, а после рестарта CRI-O или...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder