dwn

🥽 dwn dockerpwn - 도커 공격 도구 관리자 소개 dwn은 "해커를 위한 docker-compose"입니다. docker-compose와 유사한 간단한 YAML "플랜" 형식을 사용하여 이미지 이름, 버전, 볼륨/포트 매핑을 정의하여 도구를 설정합니다. 기능 dwn을 사용하면 다음을 할 수 있습니다: 일반적인 침투 테스트 도구를 도커 컨테이너에서 사용하도록 구성 컨텍스트 인식 볼륨 마운트 컨테이너 재시작 없이 동적으로 포트 바인딩 수정 그 외! 설치 간단히 pip3 install dwn을 실행하세요. 사용법 dwn은...

virt-firmware

ovmf / armvirt 펌웨어 볼륨을 위한 도구 이는 edk2 펌웨어 이미지를 위한 작은 도구 모음입니다. 펌웨어 볼륨의 내용을 디코딩하고 출력하는 기능을 지원합니다. 변수 저장소OVMFVARS.fd는 예를 들어 시큐어 부트 인증서를 등록하기 위해 수정할 수 있습니다. virt-fw-dump 펌웨어 볼륨의 내용을 디코딩하고 출력합니다. 사용법: virt-fw-dump -i . 자세한 내용은 virt-fw-dump --help를 실행해보세요. 출력을 필터링하는 몇 가지 옵션이 있습니다. virt-fw-vars 변수 저장소 볼...

ntfstool

ntfstool NTFSTool은 NTFS 볼륨에 초점을 맞춘 포렌식 도구입니다. 파티션 정보MBR, 파티션 테이블, VBR 읽기를 지원할 뿐만 아니라 마스터 파일 테이블, Bitlocker 암호화 볼륨, EFS 암호화 파일, USN 저널 등에 대한 정보도 제공합니다. 최신 바이너리는 AppVeyor에서 다운로드하거나 GitHub artefacts를 확인하세요. 아래에서 기능에 대한 몇 가지 예시를 확인하세요! deepwiki에서 제공하는 대체 문서는 여기에서 확인할 수 있습니다 :...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app, kubeflow-katib, open-webui, kubeflow-pipelines-visualization-server, kubeflow-pipelines, dask-kubernetes, kserve, jupyter-base-notebook, datadog-agent, k8s-sidecar, az, ggshield...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app, kubeflow-katib, open-webui, kubeflow-pipelines-visualization-server, kubeflow-pipelines, dask-kubernetes, kserve, jupyter-base-notebook, datadog-agent, k8s-sidecar, az, ggshield...

cve-2024-10220-test

CVE-2024-10220 테스트 저장소 이 저장소는 중앙오클라호마 대학교University of Central Oklahoma의 HPC 보안 연구의 일환으로 CVE-2024-10220 Kubernetes gitRepo 볼륨 취약점을 테스트하는 데 사용됩니다. 경고: 이 저장소는 통제된 보안 테스트를 위해 악성 Git 훅을 포함하고 있습니다. 프로덕션 환경에서 사용하지 마십시오. 취약점 세부 정보 CVE: CVE-2024-10220 구성 요소: Kubernetes kubelet gitRepo 볼륨 영향: Kubernetes...

CVE-2026-97335 Incorrect authorization in LXD storage volume API allows reading volumes from other projects

Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later fixed in 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create custom volumes in a project to copy, and so read, any custom storage volume from any...

BIT-KYVERNO-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

PT-2026-98995

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

CVE-2025-70819

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...

EUVD-2025-210895

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

SUSE CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

yolobox v0.19.4

██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝ ╚═════╝...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200: Improper Access Control

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

EUVD-2026-63981

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...