https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:02:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-194928 EUVD-2026-194928 https://cve.radiocsirt.org/vuln/euvd-2026-194928 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37916 <p>KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&amp;&amp;pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&amp;&amp;pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-37916 https://cve.radiocsirt.org/vuln/ghsa-87f6-8gr7-pc6h <p><strong>Affected:</strong> Go: github.com/KubeOperator/kubepi</p> <p>### Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&amp;&amp;pageSize=10 leak password of any user (including admin). This leads to password crack attack</p> <p>### PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview</p> <p>### Impact - Leaking confidential information. - Can lead to password cracking attacks</p> <p><strong>Affected:</strong> Go: github.com/KubeOperator/kubepi</p> <p>### Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&amp;&amp;pageSize=10 leak password of any user (including admin). This leads to password crack attack</p> <p>### PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview</p> <p>### Impact - Leaking confidential information. - Can lead to password cracking attacks</p> https://cve.radiocsirt.org/vuln/ghsa-87f6-8gr7-pc6h https://cve.radiocsirt.org/vuln/gsd-2023-37916 gsd-2023-37916 https://cve.radiocsirt.org/vuln/gsd-2023-37916