starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-fips, melange, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, rancher-fleet-fips, flux-source-controller, rke2-cloud-provider-fips, terraform, crossplane-provider-aws-appconfig-fips,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: kubernetes, loki, aactl, containerd, commercial-gitlab-workhorse-ee, terraform, frankenphp-8.4, google-osconfig-agent, spire-server, external-dns, kube-conformance, commercial-chainloop-cli, commercial-gitlab-workhorse-ee-fips, k8s-device-plugin, consul-k8s-fips, flu...

CVE-2025-51401

Exploit Title: LiveHelperChat 4. Save the changes. 5. Initiate a chat with a visitor. 6. Transfer the chat to another operator — the XSS payload executes in the receiving operator’s chat interface...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: trivy-operator, direnv, newrelic-infra-operator, verticadb-operator, secrets-store-csi-driver-provider-aws, kubeflow, kyverno-policy-reporter, juicefs, dfc, slsa-verifier, kubernetes, minio-operator, cert-exporter, kubeflow-pipelines, kuberlr, pluto,...

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

CVE-2025-51397

Exploit Title: LiveHelperChat 4. Save the changes. 5. This payload is stored and later executed when an admin or higher-...

nebula

Nebula AI Powered Pentesting The Assistant workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

GeckoDroid

GeckoDroid Adaptix C2 Framework용 모바일 클라이언트. Android 기기에서 완전한 운영자 접근 권한을 제공합니다. 기능 GeckoDroid를 사용하면 어디서든 Adaptix C2 서버를 제어할 수 있습니다. 데스크톱 클라이언트 앞에 앉아 있을 필요 없이 이동 중에도 작전을 관리할 수 있습니다. 에이전트 - 연결된 모든 에이전트를 실시간 상태 표시기와 함께 확인하세요. 검색, 활성/비활성 필터링, 이름/OS/마지막 연결 시간별 정렬이 가능합니다. 에이전트를 탭하면 콘솔이 열립니다. 콘솔 - 에이전트별...

sliver-gui

Sliver GUI Cobalt Strike와 Havoc의 정신을 계승한 Sliver C2 프레임워크용 데스크톱 운영자 콘솔입니다. Raj Kumar Mullapudi가 설계 및 개발했습니다. Sliver GUI는 Sliver의 기존 rpcpb.SliverRPC gRPC 서비스를 감싸는 얇은 Wails v2 Go + 순수 HTML/CSS/JS 프론트엔드입니다. C2 로직을 전혀 재구현하지 않으며, 공식 sliver-client와 동일한 mTLS 운영자 .cfg 파일로 연결합니다. 모든 명령 및 제어 기능은 Sliver 자체에서...

trivy-operator

Kubernetesネイティブのセキュリティツールキット。ドキュメント はじめに Trivy OperatorはTrivyを活用して、Kubernetesクラスタのセキュリティ問題を継続的にスキャンします。スキャン結果はKubernetesのCustom Resource Definitionsとしてセキュリティレポートにまとめられ、Kubernetes...

chaos-operator

쿠버네티스에 카오스 실험을 주입하기 위한 Litmus chaos-operator Codacy Badge Litmus chaos operator는 Kubernetes 애플리케이션 개발자와 SRE가 관리되는 방식으로 애플리케이션과 Kubernetes 인프라에 카오스를 주입하는 데 사용됩니다. 그 목적은 카오스 실험 실행을 자동화하여 Kubernetes에서 애플리케이션 워크로드의 검증 및 하드닝강화 과정을 쉽게 만드는 것입니다. 간단한 카오스 주입 워크플로의 예는 다음과 같습니다: 운영자 매니페스트를 통해 Litmus 인프라 구성...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: dl, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips, opentofu,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: trivy-operator, opentelemetry-operator, minio-operator, fuse-overlayfs-snapshotter, kwok, polaris, sftpgo, terraform-provider-acme, knative-client, falcoctl, kor, step-kms-plugin, q, argocd-image-updater, kube-vip, rancher-system-upgrade-controller, sqlexporter,...