CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

133 matches found

Kitploit•added 2026/09/12 1:25 a.m.•8 views

cve-2024-7646

CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...

8.8CVSS8.3AI score0.27018EPSS

SaveExploits0

Kitploit•added 2026/09/11 11:22 a.m.•6 views

ingressnightmare-detection-poc

IngressNightmare Detection Tool Overview This tool provides a non-intrusive detection capability for the IngressNightmare vulnerability chain CVE-2025-1974 affecting Ingress NGINX Controller. It specifically leverages the auth-url annotation injection vector CVE-2025-24514 to verify the presence ...

6.3AI score

SaveExploits0

Kitploit•added 2026/09/11 5:39 a.m.•8 views

CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller 漏洞分析及 PoC 环境搭建测试环境 MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes 本地测试环境设置M2 MacOS 为了进行本地测试，安装 minikube minikube start --driver=docker 使用以下命令配置 ingress-nginx-controller kubectl apply -f...

9.8CVSS7.2AI score0.99525EPSS

SaveExploits20

Kitploit•added 2026/09/10 12:27 p.m.•7 views

ingress-nightmare

IngressNightmare CVE-2025-1974 这个 Python 脚本可以帮助你了解你是否正在运行 Ingress NGINX Controller，如果是，它是否使用了已知的易受攻击版本。用法首先，请确保从此处安装 uv，然后对要审计的 Kubernetes 集群运行该脚本。 root@kitploit: uv run --with kubernetes,packaging check.py 示例输出存在漏洞的集群： root@kitploit: Checking for ingress-nginx pods... ℹ️ It looks like you're...

9.8CVSS7.2AI score0.99525EPSS

SaveExploits20References1

OSV•added 2026/09/10 1:40 a.m.•4 views

CLEANSTART-2026-WZ31386 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the ingress-nginx-controller package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

9.8CVSS7.2AI score0.00692EPSS

SaveExploits5References45

Kitploit•added 2026/09/09 5:14 a.m.•7 views

CVE-2025-1974

Ingress NGINX 漏洞利用工具 - IngressNightmare 该项目提供了一个针对 Kubernetes 中 Ingress NGINX Controller 的严重未经身份验证的远程代码执行（RCE）漏洞的利用工具，统称为 IngressNightmare。在最初的研究中，Wiz 团队没有提供 PoC 或功能性漏洞利用代码，因此我们决定自行创建并分享给社区。概述 Ingress NGINX Controller 是 Kubernetes...

9.8CVSS7AI score0.99525EPSS

SaveExploits20

Kitploit•added 2026/09/06 2:21 p.m.•7 views

POC-IngressNightmare-CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...

9.8CVSS7.2AI score0.99525EPSS

SaveExploits20References1