CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

337 matches found

Kitploit•added 2026/10/03 9:44 p.m.•13 views

CVE-2025-1974

Ingress NGINX 漏洞利用工具 - IngressNightmare 该项目提供了一个针对 Kubernetes 中 Ingress NGINX Controller 的严重未经身份验证的远程代码执行（RCE）漏洞的利用工具，统称为 IngressNightmare。在最初的研究中，Wiz 团队没有提供 PoC 或功能性漏洞利用代码，因此我们决定自行创建并分享给社区。概述 Ingress NGINX Controller 是 Kubernetes...

9.8CVSS7.2AI score0.99384EPSS

SaveExploits20

Kitploit•added 2026/10/03 8:10 p.m.•11 views

cve-2024-7646

CVE-2024-7646 描述默认情况下，nginx.ingress.kubernetes.io/server-snippet 是禁用的，但由于此 CVE，nginx.ingress.kubernetes.io/auth-tls-verify-client 仍然可以插入自定义代码片段，甚至可包含 Lua 代码。修复版本 ingress-nginx 控制器 v1.11.2 - 由 kubernetes/ingress-nginx11719 和 kubernetes/ingress-nginx11721 修复 ingress-nginx 控制器 v1.10.4 - 由...

8.8CVSS8.6AI score0.27018EPSS

SaveExploits0

Kitploit•added 2026/10/01 12:59 p.m.•12 views

ingress-nightmare

IngressNightmare CVE-2025-1974 这个 Python 脚本可以帮助你了解你是否正在运行 Ingress NGINX Controller，如果是，它是否使用了已知的易受攻击版本。用法首先，请确保从此处安装 uv，然后对要审计的 Kubernetes 集群运行该脚本。 uv run --with kubernetes,packaging check.py 示例输出存在漏洞的集群： Checking for ingress-nginx pods... ℹ️ It looks like you're using the NGinx ingress...

9.8CVSS7.6AI score0.99384EPSS

SaveExploits20References1

Kitploit•added 2026/09/28 4:05 p.m.•15 views

ingressnightmare-detection-poc

IngressNightmare 检测工具概述本工具为受 Ingress NGINX Controller 影响的 IngressNightmare 漏洞链（CVE-2025-1974）提供非侵入式检测能力。它特别利用 auth-url 注解注入向量（CVE-2025-24514）来验证该关键漏洞的存在，而无需执行任意代码。技术背景 IngressNightmare 漏洞链允许攻击者通过各种 Ingress 注解字段注入任意的 NGINX 配置指令。当这些恶意的 Ingress 资源被准入控制器处理时，注入的指令会在 NGINX 配置验证阶段（nginx -t）被评估。本 PoC...

6.2AI score

SaveExploits0

Kitploit•added 2026/09/28 2:45 a.m.•13 views

CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller 漏洞分析及 PoC 环境搭建测试环境 MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes 本地测试环境设置M2 MacOS 为了进行本地测试，安装 minikube minikube start --driver=docker 使用以下命令配置 ingress-nginx-controller kubectl apply -f...

9.8CVSS7.5AI score0.99384EPSS

SaveExploits20

Kitploit•added 2026/09/27 2:21 p.m.•10 views

POC-IngressNightmare-CVE-2025-1974

IngressNightmare（CVE-2025-1974）的POC 基于以下开发： https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities 空谈无用，直接看代码。详细信息请参见 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities 使用方法 1. 修改 shell.c 中的 IP 地址 2. 确保 Docker 可用，然后运行 make...

9.8CVSS7.4AI score0.99384EPSS

SaveExploits20References1

OSV•added 2026/09/18 10:30 a.m.•8 views

CLEANSTART-2026-JE88659 Security fix for CVE-2025-22866 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0

CVE-2025-22866 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

4CVSS5.9AI score0.0029EPSS

SaveExploits0References3

OSV•added 2026/09/18 10:30 a.m.•9 views

CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

6.1CVSS5.9AI score0.00476EPSS

SaveExploits0References3

OSV•added 2026/09/18 9:57 a.m.•9 views

CLEANSTART-2026-UT95390 Security fix for CVE-2026-41080 applied in: aws-cli 2.35.9-r2, ingress-nginx-controller 1.14.5-r2

CVE-2026-41080 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.5CVSS5.9AI score0.00398EPSS

SaveExploits0References3

OSV•added 2026/09/18 9:45 a.m.•10 views

CLEANSTART-2026-DH56111 Security fix for CVE-2026-33818 applied in: access-log-exporter 0.1.15-r1, access-log-exporter 0.2.0-r0, access-log-exporter 0.3.20-r0, argo-cd 3.2.12-r5, argo-cd-fips 3.4.7-r3, argo-rollouts-fips 1.9.1-r3, argo-workflows 3.7.17-r3, atlantis-fips 0.47.1-r1, aws-network-policy-agent 1.1.6-r3, boring-registry 0.18.0-r0, boring-registry-fips 0.17.0-r2, boring-registry-fips 0.18.0-r0, cadvisor 0.55.1-r5, cadvisor 0.56.2-r3, cadvisor 0.57.0-r5, cadvisor 0.60.5-r1, calico 3.30.7-r7, calico 3.31.6-r2, calico 3.32.1-r3, cert-manager 1.18.6-r5, cert-manager 1.19.6-r3, cert-manager 1.20.3-r4, cert-manager 1.21.1-r0, cloudnative-pg 1.27.4-r2, cloudnative-pg 1.28.4-r1, cloudnative-pg 1.29.2-r2, cloudnative-pg 1.30.0-r1, configmap-reload 0.15.0-r3, cortex 1.18.1-r5, cortex 1.20.1-r4, cosign 2.6.5-r2, cosign 3.0.6-r2, cosign 3.1.3-r0, dex 2.43.1-r3, dex 2.44.0-r8, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r0, dynatrace-operator 1.8.1-r7, elastic-beats 9.2.8-r8, elastic-beats 9.3.8-r1, external-secrets-operator 2.6.0-r5, external-secrets-operator 2.7.0-r3, external-secrets-operator 2.8.0-r2, fluent-operator-fips 3.10.0-r3, fulcio-fips 1.5.1-r3, fulcio-fips 1.6.6-r2, fulcio-fips 1.7.1-r3, git-lfs-fips 3.7.1-r1, gitea 1.26.4-r1, go-discover 0_git20250325-r4, gomplate 4.3.3-r3, gosu 1.19-r5, grafana-org-operator 1.13.0-r2, haproxy-ingress 0.13.19-r2, haproxy-ingress 0.14.12-r3, haproxy-ingress 0.15.4-r5, haproxy-ingress 0.16.1-r5, helm 3.21.4-r2, helm 4.0.5-r6, helm 4.1.4-r3, helm 4.2.3-r1, helm-fips 3.21.4-r0, helm-fips 4.2.4-r0, helm-operator 1.39.2-r2, helm-operator 1.40.0-r2, helm-operator 1.42.2-r4, helm-operator 1.42.3-r3, ingress-nginx-controller 1.12.8-r1, ingress-nginx-controller 1.13.9-r1, ingress-nginx-controller 1.14.5-r4, ingress-nginx-controller 1.15.1-r3, istio 1.29.6-r2, istio 1.30.3-r2, knative-net-istio 1.20.4-r3, knative-net-istio 1.21.4-r3, knative-net-istio 1.22.1-r1, knative-net-istio 1.23.0-r0, knative-serving 1.20.3-r1, knative-serving 1.21.3-r2, knative-serving 1.22.1-r3, knative-serving 1.23.0-r0, kube-metrics-adapter 0.2.9-r1, kube-state-metrics 2.16.0-r10, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-state-metrics-fips 2.20.0-r2, kube-vip 0.9.2-r1, kube-vip 1.0.4-r2, kube-vip 1.1.2-r4, kube-vip-fips 0.9.2-r1, kubernetes 1.33.13-r1, kubernetes 1.34.10-r5, kubernetes 1.35.7-r1, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-dns-node-cache 1.23.1-r1, kubernetes-dns-node-cache 1.24.1-r2, kubernetes-dns-node-cache 1.25.0-r9, kubernetes-dns-node-cache 1.26.8-r7, kustomize-fips 5.8.1-r1, local-path-provisioner-fips 0.0.36-r3, logstash-exporter 1.6.4-r1, logstash-exporter 1.7.1-r2, logstash-exporter 1.8.4-r2, logstash-exporter 1.9.1-r4, logstash-exporter-fips 1.6.4-r1, logstash-exporter-fips 1.7.1-r1, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, memcached-exporter 0.16.0-r2, metallb 0.13.12-r5, metallb 0.14.9-r4, metallb 0.15.3-r2, metallb 0.16.0-r3, minio-operator 6.0.4-r7, minio-operator 7.0.1-r7, minio-operator 7.1.1-r7, mongodb 8.0.29-r0, mongodb 8.1.3-r3, mongodb 8.3.8-r0, nats-streaming 0.22.1-r2, nats-streaming 0.23.2-r2, nats-streaming 0.24.6-r5, nats-streaming 0.25.6-r6, nginx-prometheus-exporter-fips 1.5.3-r1, ollama-fips 0.32.11-r1, ollama-fips 0.32.12-r1, ollama-fips 0.32.14-r1, ollama-fips 0.32.15-r2, opa-fips 1.19.1-r2, opentelemetry-collector-contrib 0.156.0-r0, opentelemetry-collector-contrib-fips 0.158.0-r3, opentelemetry-collector-contrib-fips 0.159.0-r2, prometheus 3.10.0-r8, prometheus 3.11.3-r6, prometheus-alertmanager 0.33.0-r2, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, prometheus-fips 3.12.0-r3, prometheus-mongodb-exporter-fips 0.53.0-r1, prometheus-mysqld-exporter 0.17.2-r5, prometheus-mysqld-exporter 0.18.0-r5, prometheus-mysqld-exporter 0.19.0-r4, prometheus-node-exporter 1.10.2-r4, prometheus-node-exporter 1.11.1-r3, prometheus-node-exporter 1.12.1-r1, prometheus-node-exporter 1.9.1-r4, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.11.1-r2, prometheus-operator 0.90.1-r3, prometheus-operator 0.91.0-r4, prometheus-operator 0.92.1-r2, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r3, prometheus-pushgateway-fips 1.8.0-r2, prometheus-redis-exporter 1.86.0-r2, prometheus-redis-exporter 1.87.0-r1, prometheus-redis-exporter 1.88.0-r3, prometheus-redis-exporter-fips 1.87.0-r3, prometheus-statsd-exporter 0.27.2-r1, prometheus-statsd-exporter 0.28.0-r3, prometheus-statsd-exporter 0.29.0-r0, rabbitmq-cluster-operator 2.20.1-r6, rabbitmq-cluster-operator 2.21.1-r3, rabbitmq-cluster-operator 2.22.4-r0, rabbitmq-messaging-topology-operator 1.18.3-r4, rabbitmq-messaging-topology-operator 1.19.3-r3, rabbitmq-messaging-topology-operator 1.2.1-r1, rclone 1.72.1-r12, rclone 1.73.5-r6, rclone 1.74.4-r1, renovate 44.31.0-r1, renovate 44.32.5-r2, restic 0.18.1-r5, sealed-secrets 0.35.0-r6, sealed-secrets 0.36.6-r4, sealed-secrets 0.37.0.r2, sealed-secrets 0.38.4-r0, stakater-reloader 1.1.0-r4, stakater-reloader 1.2.1-r3, stakater-reloader-fips 1.4.19-r1, step 0.27.5-r4, step 0.28.7-r5, step 0.29.0-r4, step-issuer 0.10.2-r5, step-issuer 0.11.0-r5, step-issuer 0.9.11-r3, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tekton-pipelines-fips 1.13.1-r2, tekton-pipelines-fips 1.14.0-r4, temporal-server 1.28.4-r2, temporal-server 1.29.7-r1, temporal-server 1.30.5-r1, temporal-server 1.30.6-r3, temporal-ui-server-fips 2.48.4-r1, temporal-ui-server-fips 2.49.1-r1, temporal-ui-server-fips 2.50.1-r1, terraform 1.15.7-r0, tigera-operator 1.42.1-r3, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, tkn 0.46.0-r1, trino 480-r10, trust-manager 0.21.1-r2, trust-manager 0.22.1-r3, trust-manager 0.23.0-r1, trust-manager 0.24.0-r1, vault 1.19.5-r3, vault 1.20.4-r9, vault 1.21.4-r10, vault 2.0.4-r3, vault-k8s 1.5.0.r3, vault-k8s 1.6.2-r2, vault-k8s 1.7.6-r0, velero 1.15.2-r7, velero 1.17.2-r8, velero 1.18.2-r7, velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.12.2-r9, velero-plugin-for-aws 1.13.2-r4, velero-plugin-for-aws 1.14.2-r1, velero-plugin-for-csi 0.4.3-r5, velero-plugin-for-csi 0.5.1-r4, velero-plugin-for-csi 0.6.3-r3, velero-plugin-for-csi 0.7.1-r5, victoriametrics-operator 0.71.0-r2, victoriametrics-operator-fips 0.69.0-r0, victoriametrics-operator-fips 0.70.1-r0, victoriametrics-operator-fips 0.71.0-r0, wave 0.10.0-r5, wave 0.8.0-r2, wave 0.9.0-r2, wave 011.0-r4, weaviate-fips 1.38.10-r2, weaviate-fips 1.38.11-r2

CVE-2026-33818 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.5CVSS5.9AI score0.00568EPSS

SaveExploits0References3

OSV•added 2026/09/18 9:29 a.m.•4 views

CLEANSTART-2026-ZL37756 Security fix for CVE-2024-55549 applied in: ingress-nginx-controller 1.12.8-r0, ingress-nginx-controller 1.14.5-r3

CVE-2024-55549 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.8CVSS7.3AI score0.00351EPSS

SaveExploits3References3

OSV•added 2026/09/18 9:29 a.m.•7 views

CLEANSTART-2026-WR91768 Security fix for CVE-2025-24855 applied in: ingress-nginx-controller 1.12.8-r0, ingress-nginx-controller 1.14.5-r3

CVE-2025-24855 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.8CVSS7.3AI score0.00351EPSS

SaveExploits1References3

OSV•added 2026/09/10 1:40 a.m.•10 views

CLEANSTART-2026-WZ31386 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the ingress-nginx-controller package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

9.8CVSS7.3AI score0.00692EPSS

SaveExploits5References45