132 matches found
cve-2024-7646
CVE-2024-7646 Descripción Por defecto, nginx.ingress.kubernetes.io/server-snippet está deshabilitado, pero debido a este CVE, nginx.ingress.kubernetes.io/auth-tls-verify-client puede aún insertar fragmentos personalizados, o incluso se puede incluir código lua. Versión corregida controlador...
CVE-2025-1974
CVE-2025-1974: Kubernetes Ingress Nginx Controller Vulnerability Analysis and PoC Environment Setup Test Environment MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Local Test Environment Setup M2 MacOS Install minikube for local testing minikube start...
ingressnightmare-detection-poc
Herramienta de Detección de IngressNightmare Descripción general Esta herramienta proporciona una capacidad de detección no intrusiva para la cadena de vulnerabilidades IngressNightmare CVE-2025-1974 que afecta a Ingress NGINX Controller. Específicamente, aprovecha el vector de inyección de la...
POC-IngressNightmare-CVE-2025-1974
POC de IngressNightmare CVE-2025-1974 Desarrollado a partir de: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Hablar es barato, solo mira el código. Los detalles se pueden encontrar en...
ingress-nightmare
IngressNightmare CVE-2025-1974 This Python script can help you understand if you're running the Ingress NGINX Controller, and if yes if it's using a known vulnerable version. Usage First, make sure to install uv from here and then run the script against the Kubernetes cluster to audit...
CVE-2025-1974
Exploit for Ingress NGINX - IngressNightmare This project provides an exploit targeting critical unauthenticated Remote Code Execution RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively referred to as IngressNightmare. In the original research, the Wiz team did not...
GO-2024-2428 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4419 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4423 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3567 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3566 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3568 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4417 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3566 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2026-4419 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: falco-no-driver, bom, terraform-provider-pagerduty, bento, cilium-cli, runc, kubo, eksctl, goreleaser, tfsec, ingress-nginx-controller, fuse-overlayfs-snapshotter, flux-notification-controller, minio, traefik, flux-image-automation-controller, helm-set-status,...