41 matches found
CVE-2025-1974
CVE-2025-1974...
ingressnightmare-detection-poc
IngressNightmare Detection Tool Overview This tool provides a non-intrusive detection capability for the IngressNightmare vulnerability chain CVE-2025-1974 affecting Ingress NGINX Controller. It specifically leverages the auth-url annotation injection vector CVE-2025-24514 to verify the presence ...
ingress-nightmare
IngressNightmare CVE-2025-1974 यह Python स्क्रिप्ट आपको यह समझने में मदद कर सकती है कि क्या आप Ingress NGINX Controller चला रहे हैं, और यदि हाँ, तो क्या यह किसी ज्ञात कमजोर संस्करण का उपयोग कर रहा है। उपयोग सबसे पहले, uv को यहाँ से इंस्टॉल करना सुनिश्चित करें और फिर ऑडिट करने के लिए Kubernetes...
Exploit-CVE-2025-1974-Lab
Exploit-CVE-2025-1974-Lab...
CVE-2025-1974_IngressNightmare_PoC
CVE-2025-1974IngressNightmare poc IngressNightmare Script A Python script to automate sending JSON payloads to a list of IPs via curl, capturing responses and splitting them into success and failure XML reports. Features Sends HTTPS POST requests with a JSON payload to multiple IP addresses...
CVE-2025-1974-go
Exploit CVE-2025-1974 with a single file. Usage: root@kitploit: 1. change serverip and serverport in shell.c 2. make 3. GOOS=linux go build -ldflags="-w -s -extldflags "-static"" -trimpath main.go 4. run main in your controlled pod...
IngressNightmare-RCE-POC
⚠️ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more This repository contains a proof-of-concept PoC exploit for CVE-2025-1974 , a Critical CVSS 9.8 vulnerability in the Ingress-NGINX controller for Kubernetes. This flaw allows unauthenticated remote code execution...
cve-2025-1974-lab
لا يحتوي هذا المستودع على ملف README...
CVE-2025-1974
cve-2025-1974-win11-attack-defense-lab مستودع تعليمي موجّه لنظام Windows 11 أولًا لدراسة CVE-2025-1974 في مختبر ATTACK + DEFENSE آمن وغير مُسلّح. صُمم المشروع للمقررات الجامعية، والعروض الجماعية، ولقطات الشاشة الجاهزة للتقرير. يؤكد المشروع على التنفيذ النظيف clean-room، والتحقق المحلي فقط، ومحاكا...
POC-IngressNightmare-CVE-2025-1974
Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ⚠️...
POC-IngressNightmare-CVE-2025-1974
POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...
Exploit for CVE-2025-1974
cve-2025-1974-win11-attack-defense-lab Windows 11-first educa...
Exploit for CVE-2025-1974
IngressNightmare: CVE-2025-1974 - Unauthenticated Remote Code...
Exploit for CVE-2025-1974
README Talk is cheap, just look at the code. Detailed can be...
rke2-1.32-1.32.4+rke2r1-1.1 on GA media (moderate)
rke2-1.32-1.32.4+rke2r1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15083-1 Rating: moderate Cross-References: CVE-2025-1974 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.2-ifix1 Vulnerability Details CVEID:CVE-2025-1974 DESCRIPTION: A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve...
Exploit for CVE-2025-1974
CVE-2025-1974 화이트햇 스쿨 3기 - 김소은 @salt318 https://github...
Exploit for CVE-2025-1974
Kubernetes Ingress-NGINX 인증되지 않은 원격 코드 실행CVE-2025-1974 Ingr...