Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — PoC de escape de contenedor en Kubernetes Una prueba de concepto que demuestra cómo un contenedor completamente no privilegiado puede lograr ejecución de código a nivel de nodo en Kubernetes explotando el bug de corrupción de la caché de páginas del kernel Linux...

martian-packets

Martian Packets 一个包含 Python 脚本的仓库，可用于构造原始 TCP/IP 数据包。 用于测试在 Kubernetes（kube-proxy: CVE-2020-8558）中公布的一个漏洞所涉及的火星数据包。该 PoC 覆盖了 pod → 节点（主机）本地回环边界的绕过。 关于该漏洞中节点 → 节点部分的简单且健壮的 PoC，请见此处。 数据包构造参考： https://inc0x0.com/tcp-ip-packets-introduction/tcp-ip-packets-3-manually-create-and-send-raw-tcp-ip-packets...

POC-2020-8558

Resumen CVE-2020-8558 es una vulnerabilidad de Kubernetes que fue publicada porque kube-proxy inesperadamente hace que los servicios del host vinculados a localhost estén disponibles para otros en la red. Pongo énfasis en inesperadamente porque esta vulnerabilidad se debe a un defecto de diseño...

CVE-2018-1002105

CMPT733-Group110x90 CVE-2018-1002105 Miembros : Abhishek Rungta, Shubham Saini, Siddhant Sood Configuración del Entorno Una máquina virtual Linux como Ubuntu 20.04 Minikube para el despliegue local de Kubernetes Cualquiera de estas versiones antiguas 1.0.x— 1.9.x, 1.10.0—1.10.10, 1.11.0—1.11.4,...

CLEANSTART-2026-CN04720 Security fixes in eks-distro-kube-proxy-fips 1.35.7-r0

Package eks-distro-kube-proxy-fips version 1.35.7-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

tetragon-lab

How it works This poc use copyfail exploit to overwrite page-...

SUSE CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

GHSA-M38G-VWW2-MVGX Talos Linux has a local privilege escalation from untrusted workloads

Summary A vulnerability in the Linux kernel's algifaead subsystem CVE-2026-31431, "copy.fail" allows an unprivileged container workload to corrupt arbitrary file page-cache pages via the AFALG crypto interface and splice. On Talos Linux, this vulnerability can be chained into a complete node...

EUVD-2023-2624

Malicious code in bioql PyPI...

Security Bulletin: Astronomer with IBM is vulnerable to unintentional traffic forwarding due to kube-proxy (CVE-2021-25736)

Summary Kube-proxy is used by Astronomer with IBM as part of Kubernetes functionality. Vulnerability Details CVEID:CVE-2021-25736 DESCRIPTION: Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when t...

Linux Distros Unpatched Vulnerability : CVE-2020-8558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent...

GO-2023-2159 Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes...

Misconfiguration Of LoadBalancer Service

github.com/kubernetes/kubernetes is vulnerable to Misconfiguration of LoadBalancer Service. The vulnerability is present in the proxier.go. In the context of Kube-proxy on Windows, there is an issue where it can inadvertently forward traffic to local processes that are listening on the same port ...

Kube-proxy may unintentionally forward traffic

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port spec.ports.port as a LoadBalancer Service when the LoadBalancer controller does not set the status.loadBalancer.ingress.ip field. Clusters where the LoadBalancer controller sets the...

GHSA-35C7-W35F-XWGH Kube-proxy may unintentionally forward traffic

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port spec.ports.port as a LoadBalancer Service when the LoadBalancer controller does not set the status.loadBalancer.ingress.ip field. Clusters where the LoadBalancer controller sets the...

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

Code injection

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

CVE-2021-25736 Windows kube-proxy LoadBalancer contention

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...