GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, opensearch, wavefront-proxy, jenkins-plugin-manager, cassandra-reaper, celeborn, tez, logstash, thingsboard, neo4j, cass-config-builder, spdx-tools-java, akhq, gradle, wildfly, cassandra, strimzi-kafka-operator,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, opensearch, wavefront-proxy, jenkins-plugin-manager, cassandra-reaper, celeborn, tez, logstash, thingsboard, neo4j, cass-config-builder, spdx-tools-java, akhq, gradle, wildfly, cassandra, strimzi-kafka-operator,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, cilium, hubble, kubescape...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: helm-set-status, gitness, maru, cert-manager-cmctl, helm-mapkubeapis, k9s, manifest-tool, tigera-operator, flux-helm-controller, kyverno-notation-aws, rancher-helm, cluster-api-helm-controller, helm-push, k8sgpt, kargo, kube-arangodb, opentofu, xeol...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: helm-set-status, gitness, maru, cert-manager-cmctl, helm-mapkubeapis, k9s, manifest-tool, tigera-operator, flux-helm-controller, kyverno-notation-aws, rancher-helm, cluster-api-helm-controller, helm-push, k8sgpt, kargo, kube-arangodb, opentofu, xeol...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: nerdctl, neuvector-scanner, eksctl, tigera-operator, rancher-helm, kube-arangodb, syft, docker-compose, buildkitd, trivy-operator, kubescape-operator, manifest-tool, kubevela, scorecard, zarf, skaffold, docker, spegel, headlamp, rancher, zot, kubescape,...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055

The postgresql-operator charm contains a vulnerability where the Prometheus postgres_exporter writes the monitoring user's password in cleartext to its logs during database connection errors. An attacker with log-reading permissions can recover this password to gain read-only pg_monitor access to...

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

cdn-ip-scanner

CDN IP Scanner V2.0 High Accuracy • Ultra Fast • AI Powered English • فارسی • Download • Donate 🇬🇧 English What is CDN IP Scanner? CDN IP Scanner is a powerful, web-based tool for scanning and finding the fastest CDN Content Delivery Network IP addresses. It helps users discover clean, low-latency...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – Fuga de información de coincidencias SQLite FTS3 mediante manipulación de consultas Código del programa Python sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content...

atomic-operator

license atomic-operator 此 Python 包用于在多种操作系统环境中执行 Atomic Red Team 测试（Atomics）。 新增内容？ 为什么？ atomic-operator 使安全专业人员能够针对 atomic-red-team 中定义的既定技术测试其检测和防御能力。通过使用 atomic-operator 这样的测试框架，您可以识别自己的防御能力以及防御覆盖范围的缺口。 此外，atomic-operator 还可用于许多其他场景，例如： 生成警报以测试产品 测试 EDR 和其他安全工具 从对手角度识别执行防御规避的方法 等等。 特性 支持在...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, airflow-core, pgadmin4-fips, ansible-operator, openstack-octavia-2026.1, tensorflow-gpu-jupyter, request-1276, openstack-heat-2025.2, openstack-keystone-2025.1, openstack-glance-2026.1, openstack-nova-2026.1,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, airflow-core, pgadmin4-fips, ansible-operator, openstack-octavia-2026.1, tensorflow-gpu-jupyter, request-1276, openstack-heat-2025.2, openstack-keystone-2025.1, openstack-glance-2026.1, openstack-nova-2026.1,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, airflow-core, pgadmin4-fips, ansible-operator, openstack-octavia-2026.1, tensorflow-gpu-jupyter, request-1276, openstack-heat-2025.2, openstack-keystone-2025.1, openstack-glance-2026.1, openstack-nova-2026.1,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, airflow-core, pgadmin4-fips, ansible-operator, openstack-octavia-2026.1, tensorflow-gpu-jupyter, request-1276, openstack-heat-2025.2, openstack-keystone-2025.1, openstack-glance-2026.1, openstack-nova-2026.1,...

backup_dc_registry

Copia de seguridad del registro de Backup Operator para comprometer el dominio Un POC simple que abusa de los privilegios de Backup Operator para volcar de forma remota las hives SAM, SYSTEM y SECURITY. Créditos de la investigación: @filipdragovic Portado del PoC de Windows de @mpgn Uso Esta prue...

CVE-2026-55396

The Teledyne FLIR Aware2 software, specifically in versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) , is vulnerable to the cleartext transmission of UDP traffic from the operator control unit to the robot. Because this traffic lacks a cryptographic integrity check , adjacent unauthenticat...

Fortigate-SSL-VPN-Exploit-Kit

Kit de FortiGate SSL-VPN recuperado en la naturaleza Archivo de investigación. Recuperado tal como se encontró. Yo no escribí estos archivos. Publicado: 1 de septiembre de 2026 Este repositorio es el orquestador, los payloads de segunda etapa y los listeners de operador que se sitúan sobre un...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.5.3

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. The 1.5.3 release of COO...