13 matches found
CVE-2025-1974
CVE-2025-1974 الدفعة الثالثة من مدرسة القبعات البيضاء - كيم سو-أون @salt318 https://github.com/salt318/vulhub الملخص ينشأ بسبب خلل في Ingress-NGINX Admission Controller، وهي آلية الأمان الأساسية في Kubernetes يكون Ingress-NGINX Admission Controller مكشوفًا على الشبكة دون مصادقة ونتيجة لذلك، يمكن...
CVE-2025-1974
Kubernetes Ingress-NGINX تنفيذ تعليمات برمجية عن بُعد غير مصادق عليه CVE-2025-1974 Ingress-NGINX: وحدة تحكم الدخول Ingress Controller لـ Kubernetes تستخدم NGINX كعكس وكيل وموازن تحميل ينشأ الثغرة "IngressNightmare" CVE-2025-1974 من عيب قاتل في وحدة تحكم القبول Admission Controller لـ Ingress-NGIN...
cve-2026-24514-Kubernetes-Dos
CVE-2026-24514 – Épuisement critique de la mémoire dans le webhook d'admission de validation ingress-nginx Vulnérabilité de déni de service à distance non authentifiée / à faibles privilèges permettant à des attaquants de faire planter les pods du contrôleur ingress-nginx via des requêtes...
CVE-2025-1974-PoC-exploit
CVE-2025-1974-PoC-exploit Exploitation RCE d'Ingress-nginx Kubernetes IngressNightmare root@kitploit: ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit...
SUSE CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
Exploit for CVE-2026-24514
!Authorhttps://img.shields.io/badge/Author-Mohammed%20Idrees%...
CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
CVE-2026-26055 Unauthenticated Admission Webhook Endpoints in Yoke ATC
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
PT-2026-7905
Name of the Vulnerable Software and Affected Versions Yoke versions 0.18.x and earlier Description The Air Traffic Controller ATC component of Yoke lacks proper authentication mechanisms for its webhook endpoints. This allows any pod within the cluster network to send AdmissionReview requests...
Exploit for CVE-2025-1974
Kubernetes Ingress-NGINX 인증되지 않은 원격 코드 실행CVE-2025-1974 Ingr...