130 matches found
CVE-2025-1974
CVE-2025-1974: Análisis de vulnerabilidad y configuración del entorno PoC para Kubernetes Ingress Nginx Controller Entorno de prueba MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Configuración del entorno de prueba local M2 MacOS Instalar minikube para las...
cve-2024-7646
CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...
ingress-nightmare
IngressNightmare CVE-2025-1974 Este script de Python puede ayudarte a determinar si estás ejecutando el Ingress NGINX Controller y, en caso afirmativo, si está usando una versión vulnerable conocida. Uso Primero, asegúrate de instalar uv desde aquí y luego ejecuta el script contra el clúster de...
POC-IngressNightmare-CVE-2025-1974
POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...
CVE-2025-1974
Exploit per Ingress NGINX - IngressNightmare Questo progetto fornisce un exploit mirato a vulnerabilità critiche di esecuzione remota di codice RCE non autenticata nel controller Ingress NGINX per Kubernetes, note collettivamente come IngressNightmare. Nella ricerca originale, il team di Wiz non ...
ingressnightmare-detection-poc
Strumento di Rilevamento IngressNightmare Panoramica Questo strumento fornisce una capacità di rilevamento non intrusiva per la catena di vulnerabilità IngressNightmare CVE-2025-1974 che colpisce Ingress NGINX Controller. Nello specifico sfrutta il vettore di iniezione tramite l'annotazione...
GO-2026-4423 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2024-2428 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4419 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3566 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3567 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3568 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4417 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3566 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2026-4419 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: osv-scanner, cosign, k3s, nerdctl, k8sgateway, redka, cilium-cli, src, flux-kustomize-controller, kubo, steampipe, kubeflow-katib, thanos-operator, croc, kubernetes-dashboard-api, flux-notification-controller, timoni, opentofu, aws-flb-kinesis, eksctl, mc,...