CVE-2023-29007

CVE-2023-29007 مستودع إثبات المفهوم لـ CVE-2023-29007 معلومات إضافية متاحة في: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4 : Exécution de code via l'injection de configuration Laravel Article de blog sur la vulnérabilité https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ Vous pouvez l'utiliser pour un CTF ou simplement pour apprendre. Amusez-vous et que...

IngressNightmare-RCE-POC

⚠️ ثغرة RCE حرجة في Ingress-NGINX عبر حقن التهيئة CVE-2025-1974 وأكثر يحتوي هذا المستودع على إثبات مفهوم PoC لاستغلال CVE-2025-1974 ، وهي ثغرة حرجة CVSS 9.8 في وحدة التحكم Ingress-NGINX الخاصة بـ Kubernetes. تسمح هذه الثغرة بتنفيذ تعليمات برمجية عن بُعد دون مصادقة عبر حقن غير آمن للتهيئة عند...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration

A flaw was found in GitPython, a Python library used to interact with Git repositories. The GitConfigParser.setvalue function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the core.hooksPath, into a Gi...

CVE-2026-66786

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

CVE-2026-3288-lab

CVE-2026-3288 Laboratoire Vulnérable Docker Injection de Configuration dans NGINX Ingress Controller ⚠️ AVERTISSEMENT : Ce laboratoire contient des configurations intentionnellement vulnérables pour FORMATION EN SÉCURITÉ AUTORISÉE UNIQUEMENT Présentation de la Vulnérabilité CVE-2026-3288 CVSS 8.8...

CVE-2026-77180

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

CVE-2026-66362

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...

EUVD-2026-70139

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...

EUVD-2026-70141

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

CVE-2026-66362

CVE-2026-66362 is a configuration injection vulnerability in the NGINX configuration generator component of NGINX Gateway Fabric . When NGINX Plus is configured as the data plane, user-supplied values from the AuthenticationFilter CRD (clientID, cookieName) or the clientSecret field of a referenc...

CVE-2026-66362 NGF vulnerability

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or...

K000162601: NGINX Ingress Controller vulnerability CVE-2026-77180

Security Advisory Description When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without...

K000162600: NGINX Gateway Fabric vulnerability CVE-2026-66362

Security Advisory Description When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the AuthenticationFilter custom resource definition CR...

cve-2024-4577

Script de test de vulnérabilité CVE-2024-4577 Ce script Python est un simple outil PoC Proof of Concept pour diagnostiquer la dernière vulnérabilité PHP CVE-2024-4577. ⚠️ Cet outil est fourni à des fins de diagnostic de sécurité et ne doit être utilisé que sur vos propres systèmes ou sur des cible...

CVE-2023-29007_win-version

CVE-2023-29007win-version PoC الأصلي https://github.com/ethiack/CVE-2023-29007 مستودع PoC لـ CVE-2023-29007 معلومات إضافية متوفرة على: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

CVE-2023-33246

CVE-2023-33246 - تنفيذ التعليمات البرمجية عن بُعد في RocketMQ CVE-2023-33246 - استغلال تنفيذ التعليمات البرمجية عن بُعد في تكوين Apache RocketMQ نظرة عامة RocketMQ هي منصة مراسلة وتدفق موزعة. إصدارات RocketMQ 5.1.0 وما دونها عرضة لحقن التعليمات البرمجية التعسفي. يتم تسريب مكون Broker الخاص بـ...

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...