cve-2023-5044

CVE-2023-5044 Ingress Nginx 익스플로잇 개념 증명 이것은 Ingress Nginx 컨트롤러의 최근 CVE를 익스플로잇하는 빠른 Go 프로그램입니다. 이 방법에 대한 자세한 내용은 Rory McCune의 블로그https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/에서 이미 확인할 수 있으며, 이 도구는 프로세스를 약간 자동화하고 익스플로잇을 정리하여 더 유연하고 일반적인 원격 코드 실행 페이로드로 만듭니다. 설치 root@kitploit: %...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cluster-api-helm-controller, gatekeeper, cert-manager-cmctl, xeol, rancher-agent, cloudbeat-fips, rancher-fleet, kube-mgmt, kyverno-notation-aws-fips, argo-cd-fips, gogatekeeper, eksctl, cert-manager-cmctl-fips, tw, kube-arangodb, linkerd2-fips,...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cluster-api-helm-controller, gatekeeper, cert-manager-cmctl, xeol, rancher-agent, cloudbeat-fips, rancher-fleet, kube-mgmt, kyverno-notation-aws-fips, argo-cd-fips, gogatekeeper, eksctl, cert-manager-cmctl-fips, tw, kube-arangodb, linkerd2-fips,...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the kube-controller-manager when using the in-tree Portworx StorageClass. An attacker can access sensitive information from unprotected endpoints within the control plane's host network, including...

CVE-2025-13281 Portworx Half-Blind SSRF in kube-controller-manager

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-200056

Malicious code in kubernetes-controller-tools npm...

MAL-2025-191513 Malicious code in kubernetes-controller-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42961dff6a9f6fd9e6dce1e6906ba8e15d64622a3856a65dc61ec9fd6974252b The package kubernetes-controller-tools was found to contain malicious code...

Malicious code in kubernetes-controller-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42961dff6a9f6fd9e6dce1e6906ba8e15d64622a3856a65dc61ec9fd6974252b The package kubernetes-controller-tools was found to contain malicious code...

EUVD-2025-0156

Malicious code in bioql PyPI...

EUVD-2025-0141

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side...

CVE-2025-24376

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when...

CVE-2025-24376 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when...

CVE-2025-24784 kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The policy group feature, added to by the 1.17.0 release. By being namespaced, the AdmissionPolicyGroup has a well constrained impact on cluster resources. Hence, it’s considere...

CVE-2025-24784

CVE-2025-24784 affects kubewarden-controller (AdmissionPolicyGroup CRD) in Kubewarden. The issue enables an information leak where context aware policies can—via the ServiceAccount used to run the Policy Server—list/get resources in the cluster beyond the policy’s own scope, depending on the RBAC...

kube-controller-manager: malformed HPA v1 manifest causes crash

A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn...

This Week in Spring - August 1st, 2022

Aloha, Spring fans! Welcome to another installment of This Week in Spring! Im still on vacation on the beautiful island of Maui, Hawaii, but I wanted to say hello "aloha!" and share this weeks latest roundup of all thats good and glorious in the wide and wonderful world of Springdom. Funny thing,...

This Week in Spring - July 26th, 2022

Aloha, Spring fans! Im on vacation, reporting to you from the paradise-like island of Maui, Hawaii, and hoping that youre having a wonderful day! My family and I love Hawaii. Its brimming with beauty and serenity, and while the island of Maui, in the state of Hawaii, is very small, the islands ar...