Browse / Kubernetes

Kubernetes

See its reports on the map

Attack surface: 662 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Kubernetes

• Access Control14
• Authentication12
• Information Disclosure11
• Code Execution10
• Denial of Service6
• Cryptography5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Attacker can bypass authentication build on ingress external auth (`nginx.ingress.kubernetes.io/auth-url`)InformativeImproper Authentication - Generic · medium
   16 votes
2. Username enumeration via Openssh 7.6InformativeInformation Disclosure · medium
   12 votes
3. XSS on kubernetes-csi.github.io (mdBook)InformativeCross-site Scripting (XSS) - Reflected · medium
   9 votes
4. ClickjackingInformativeUI Redressing (Clickjacking)
   5 votes
5. Man in the middle leading to root privilege escalation using hostNetwork=true (CAP_NET_RAW considered harmful)InformativeMan-in-the-Middle · medium
   4 votes
6. API Server DoS (crash?) if many large resources (~1MB each) are concurrently/repeatedly sent to an external Validating WebHook endpointInformativeUncontrolled Resource Consumption · medium
   2 votes
7. Github test clientID and clientSecret leakedInformativePlaintext Storage of a Password · low
   2 votes
8. kubectl creating secrets from stringData leaves secret in plain textInformativeCleartext Storage of Sensitive Information · low
   1 votes
9. Kubelet follows symlinks as root in /var/log from the /logs server endpoint InformativePrivilege Escalation · medium
   1 votes
10. Private IP addresses DisclosureInformativeInformation Disclosure
    1 votes
11. Configuartion [Sensitive] Information DisclosureInformativeInformation Disclosure
    1 votes
12. Hard coded Username and password in GiHub commitInformativeUse of Hard-coded Credentials
13. Internal IP addresses range and AWS cluster region leaked in a Github repository InformativeInsecure Storage of Sensitive Information
14. Plaintext storage of a password on kubernetes release bucketInformativePlaintext Storage of a Password