Cobian Reflector 安全漏洞

Cobian Reflector is a file backup software by Luis Cobian Personal Developer. A security vulnerability exists in Cobian Reflector version 0.9.93 RC1, which stems from a password input field overflow that could lead to a denial of service attack...

PT-2025-52694

Name of the Vulnerable Software and Affected Versions Cobian Reflector version 0.9.93 RC1 Description The software contains a denial of service issue that allows attackers to crash the application. This occurs by overflowing the password input field. An attacker can paste a large 8000-byte buffer...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, openbao-k8s, glow, pguser, prometheus-blackbox-exporter-fips, etcd-fips, k6-fips, snyk-cli, kargo, gitlab-runner-fips, jitsucom-bulker, cue-fips, kube-logging-operator-custom-runner-fips, scorecard, kube-metrics-adapter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, openbao-k8s, glow, pguser, prometheus-blackbox-exporter-fips, etcd-fips, k6-fips, snyk-cli, kargo, gitlab-runner-fips, jitsucom-bulker, cue-fips, kube-logging-operator-custom-runner-fips, scorecard, kube-metrics-adapter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: govulncheck, kafkaexporter, nats, nri-f5, harbor, kubeflow, tofu-controller, kubeflow-pipelines, cluster-api-aws-controller, nvidia-container-toolkit, k3d, glab, hcloud, gke-gcloud-auth-plugin, gitleaks, nri-mysql, rabbitmq-cluster-operator, opentofu, nri-jmx,...

EUVD-2018-6488

Malware in sbrugna...

EUVD-2012-2558

Malware in sbrugna...

CVE-2025-9708 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-W7R3-MGWF-4MQQ vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

CVE-2025-9708 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-W7R3-MGWF-4MQQ vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: containerd-fips, openbao-k8s, glow, pguser, k6-fips, snyk-cli, jitsucom-bulker, terraform-provider-kubernetes, kube-metrics-adapter-fips, cilium-envoy-fips, kubelet-csr-approver-fips, rabbitmq-messaging-topology-operator, spire-server, hubble,...

GHSA-29WX-VH33-7X7R vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, flux-image-reflector-controller, falcoctl, crossplane-provider-azure-storage, ko, crossplane-provider-azure-managedidentity, argo-rollouts, minio-operator, rclone, octo-sts, flux-source-controller, minio, chartmuseum, azcopy,...

CVE-2024-51744 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, flux-image-reflector-controller, falcoctl, crossplane-provider-azure-storage, ko, crossplane-provider-azure-managedidentity, argo-rollouts, minio-operator, rclone, octo-sts, flux-source-controller, minio, chartmuseum, azcopy,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, falcoctl, spire-server, step-ca, trino, flux-kustomize-controller, velero, py3-azure-identity, ksops, grafana-agent-operator, rclone, flux, fluent-bit-plugin-loki, flux-source-controller, grafana-mimir, k8sgpt, harbor-registry,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: rancher-machine, eksctl, kargo, k8sgpt, chartmuseum, scorecard, goreleaser, helm-operator, timoni, nerdctl, cadvisor, cri-tools, helm, skopeo, cosign, kubescape, zot, falcoctl-fips, docker-credential-gcr, buildkitd, dagger, loki, ko-fips, guac, skaffold,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: rancher-machine, eksctl, kargo, k8sgpt, chartmuseum, scorecard, goreleaser, helm-operator, timoni, nerdctl, cadvisor, cri-tools, helm, skopeo, cosign, kubescape, zot, falcoctl-fips, docker-credential-gcr, buildkitd, dagger, loki, ko-fips, guac, skaffold,...

GHSA-6758-979H-249X capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name

Summary A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. Details - Tenant solar, owned by a ServiceAccount named tenant-owner in the Namespace solar - Tenant wind, owne...

CVE-2023-46254

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. For example consider two tenants solar...

PT-2023-29934 · Unknown · Capsule-Proxy

Name of the Vulnerable Software and Affected Versions: capsule-proxy versions prior to 0.4.5 Description: A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. This introduc...