16 matches found
CVE-2025-1974-PoC-exploit
CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================ Target:...
CVE-2025-1974
Kubernetes Ingress-NGINX Unauthenticated Remote Code Execution CVE-2025-1974 Ingress-NGINX: An ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer The "IngressNightmare" vulnerability CVE-2025-1974 stems from a critical flaw in the Ingress-NGINX Admission Controller...
cve-2026-24514-Kubernetes-Dos
CVE-2026-24514 – Critical Memory Exhaustion in ingress-nginx Validating Admission Webhook Unauthenticated / low-privileged remote denial-of-service vulnerability allowing attackers to crash ingress-nginx controller pods via oversized AdmissionReview requests. Overview & Business Impact The...
CVE-2025-1974
CVE-2025-1974 White Hat School 3rd Cohort - Kim So-eun @salt318 https://github.com/salt318/vulhub Summary Caused by a defect in the Ingress-NGINX Admission Controller, a core security mechanism of Kubernetes The Ingress-NGINX Admission Controller is exposed to the network without authentication...
CVE-2026-54462
The knative.dev/pkg shared library is vulnerable to a memory exhaustion attack in its admission webhook handler (located in webhook/admission.go). Because the json.NewDecoder uses an io.TeeReader without an http.MaxBytesReader or equivalent body-size limit, a pod-network client can send an oversi...
SUSE CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
Exploit for CVE-2026-24514
!Authorhttps://img.shields.io/badge/Author-Mohammed%20Idrees%...
CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
CVE-2026-26055 Unauthenticated Admission Webhook Endpoints in Yoke ATC
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
CVE-2026-26055
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
CVE-2026-26055: Missing Authentication for Critical Function
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...
PT-2026-7905
Name of the Vulnerable Software and Affected Versions Yoke versions 0.18.x and earlier Description The Air Traffic Controller ATC component of Yoke lacks proper authentication mechanisms for its webhook endpoints. This allows any pod within the cluster network to send AdmissionReview requests...
Exploit for CVE-2025-1974
Kubernetes Ingress-NGINX 인증되지 않은 원격 코드 실행CVE-2025-1974 Ingr...