CVE-2020-8559

Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only. Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who h...

POC-2020-8559

POC-2020-8559 Exploit for CVE-2020-8559. We steal all the connections to the kubelet using iptables then rewrite the 101 or 302 responses to 307. The 101s are for modern Kubernetes versions, the 302s are for older ones. We don't have access to the kube-apiserver's x509 cert, so kubelet webhook au...

CVE-2022-23648-POC

PoC for CVE-2022-23648 This is a proof of concept for @fel1x's CVE-2022-23648. Disclosure info here, CVE info here and a blog with some more information and mitigation ideas here. The Containerfile has the info. needed, and you can change the target of the VOLUME to try out different paths. Easie...

kubolt

¿Qué? Kubolt es una utilidad simple para escanear clústeres de Kubernetes públicos no autenticados y ejecutar comandos dentro de contenedores ¿Por qué? A veces, el puerto 10250 de kubelet está abierto para acceso no autorizado y hace posible ejecutar comandos dentro de los contenedores usando la...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...

subpath-exploit

Sample Kubernetes Escape via CVE-2017-1002101 Description After hearing about the issue and following this guide, I wanted to explore things a bit more. This repo contains a couple pod deployments and helper shell scripts that demonstrate the attack mechanism in the simplest way possible so that...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC Kubernetes MitM attacks via IPv6 rogue router advertisements For educational purposes only Requirements Kubernetes cluster with the following kubelet version kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6...

cve-2024-10220-test

Repositorio de Pruebas para CVE-2024-10220 Este repositorio se utiliza para probar CVE-2024-10220 vulnerabilidad de volúmenes gitRepo de Kubernetes como parte de la investigación de seguridad HPC en la Universidad de Oklahoma Central. ADVERTENCIA: Este repositorio contiene un hook de Git malicios...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...

ZigRaceExploit

CVE-2021-25741 — Exploit di race condition TOCTOU sui symlink in Zig Exploit didattico della race condition TOCTOU Time Of Check, Time Of Use all'origine di CVE-2021-25741, una vulnerabilità nel kubelet di Kubernetes. Il progetto dimostra localmente senza cluster K8s come uno swap concorrente di...

CVE-2021-25741

Informazioni È un exploit per la vulnerabilità CVE-2021-25741. Questa vulnerabilità consente di montare il filesystem di Node all'interno di un nuovo POD con privilegi di lettura-scrittura. Puoi leggere ulteriori informazioni sulla vulnerabilità qui:...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.42 security update

Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.56 security and extras update

Red Hat OpenShift Container Platform release 4.17.56 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.29 security and extras update

Red Hat OpenShift Container Platform release 4.20.29 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.24 security and extras update

Red Hat OpenShift Container Platform release 4.21.24 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...