CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

337 matches found

Kitploit•added 2026/10/02 6:20 p.m.•11 views

cve-2024-7646

CVE-2024-7646 Описание По умолчанию nginx.ingress.kubernetes.io/server-snippet отключен, но из-за этой CVE nginx.ingress.kubernetes.io/auth-tls-verify-client всё ещё может вставлять пользовательские фрагменты или даже lua-код. Исправленная версия контроллер ingress-nginx v1.11.2 — исправлено...

8.8CVSS8.6AI score0.27018EPSS

SaveExploits0

Kitploit•added 2026/10/01 12:59 p.m.•12 views

ingress-nightmare

IngressNightmare CVE-2025-1974 이 Python 스크립트는 Ingress NGINX Controller를 실행 중인지, 그리고 실행 중이라면 알려진 취약한 버전을 사용 중인지 이해하는 데 도움을 줍니다. 사용법 먼저 여기에서 uv를 설치한 다음, 감사할 Kubernetes 클러스터에 대해 스크립트를 실행하세요. uv run --with kubernetes,packaging check.py 샘플 출력 취약한 클러스터: Checking for ingress-nginx pods... ℹ️ It looks lik...

9.8CVSS7.5AI score0.99384EPSS

SaveExploits20References1

Kitploit•added 2026/09/28 4:05 p.m.•15 views

ingressnightmare-detection-poc

IngressNightmare 탐지 도구 개요 이 도구는 Ingress NGINX Controller에 영향을 미치는 IngressNightmare 취약점 체인CVE-2025-1974에 대한 비침습적 탐지 기능을 제공합니다. 특히 auth-url 주석 삽입 벡터CVE-2025-24514를 활용하여 임의 코드 실행 없이 이 중요 취약점의 존재를 확인합니다. 기술 배경 IngressNightmare 취약점 체인은 공격자가 다양한 Ingress 주석 필드를 통해 임의의 NGINX 설정 지시어를 주입할 수 있도록 합니다. 이러한 악성...

6.2AI score

SaveExploits0

Kitploit•added 2026/09/28 2:45 a.m.•13 views

CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller 취약점 분석 및 PoC 환경 구축 테스트 환경 MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes 로컬 테스트 환경 세팅M2 MacOS 로컬 테스트를 위해 minikube를 설치 minikube start --driver=docker 아래 명령어로 ingress-nginx-controller를 구성 kubectl apply -f...

9.8CVSS7.6AI score0.99384EPSS

SaveExploits20

Kitploit•added 2026/09/27 2:21 p.m.•10 views

POC-IngressNightmare-CVE-2025-1974

IngressNightmare CVE-2025-1974 POC 다음에서 개발됨: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities 말보다는 코드를 직접 보라. 자세한 내용은 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities 에서 확인할 수 있다. 사용법 1. shell.c의 IP를 변경한다. 2. Docker를 사용할 수...

9.8CVSS7.3AI score0.99384EPSS

SaveExploits20References1

Kitploit•added 2026/09/26 9:43 p.m.•13 views

CVE-2025-1974

Ingress NGINX - IngressNightmare용 익스플로잇 이 프로젝트는 Kubernetes용 Ingress NGINX Controller의 심각한 인증되지 않은 원격 코드 실행RCE 취약점을 대상으로 하는 익스플로잇을 제공하며, 이를 통칭하여 IngressNightmare라고 합니다. 원본 연구에서 Wiz 팀은 PoC나 작동 가능한 익스플로잇을 제공하지 않았기 때문에, 우리는 자체적으로 제작하여 커뮤니티와 공유하기로 결정했습니다. 개요 Ingress NGINX Controller는 Kubernetes 환경에서 널...

9.8CVSS7.1AI score0.99384EPSS

SaveExploits20

OSV•added 2026/09/18 10:30 a.m.•8 views

CLEANSTART-2026-JE88659 Security fix for CVE-2025-22866 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0

CVE-2025-22866 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

4CVSS5.9AI score0.0029EPSS

SaveExploits0References3

OSV•added 2026/09/18 10:30 a.m.•9 views

CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

6.1CVSS5.9AI score0.00476EPSS

SaveExploits0References3

OSV•added 2026/09/18 9:57 a.m.•9 views

CLEANSTART-2026-UT95390 Security fix for CVE-2026-41080 applied in: aws-cli 2.35.9-r2, ingress-nginx-controller 1.14.5-r2

CVE-2026-41080 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.5CVSS5.9AI score0.00398EPSS

SaveExploits0References3

OSV•added 2026/09/18 9:45 a.m.•10 views

CLEANSTART-2026-DH56111 Security fix for CVE-2026-33818 applied in: access-log-exporter 0.1.15-r1, access-log-exporter 0.2.0-r0, access-log-exporter 0.3.20-r0, argo-cd 3.2.12-r5, argo-cd-fips 3.4.7-r3, argo-rollouts-fips 1.9.1-r3, argo-workflows 3.7.17-r3, atlantis-fips 0.47.1-r1, aws-network-policy-agent 1.1.6-r3, boring-registry 0.18.0-r0, boring-registry-fips 0.17.0-r2, boring-registry-fips 0.18.0-r0, cadvisor 0.55.1-r5, cadvisor 0.56.2-r3, cadvisor 0.57.0-r5, cadvisor 0.60.5-r1, calico 3.30.7-r7, calico 3.31.6-r2, calico 3.32.1-r3, cert-manager 1.18.6-r5, cert-manager 1.19.6-r3, cert-manager 1.20.3-r4, cert-manager 1.21.1-r0, cloudnative-pg 1.27.4-r2, cloudnative-pg 1.28.4-r1, cloudnative-pg 1.29.2-r2, cloudnative-pg 1.30.0-r1, configmap-reload 0.15.0-r3, cortex 1.18.1-r5, cortex 1.20.1-r4, cosign 2.6.5-r2, cosign 3.0.6-r2, cosign 3.1.3-r0, dex 2.43.1-r3, dex 2.44.0-r8, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r0, dynatrace-operator 1.8.1-r7, elastic-beats 9.2.8-r8, elastic-beats 9.3.8-r1, external-secrets-operator 2.6.0-r5, external-secrets-operator 2.7.0-r3, external-secrets-operator 2.8.0-r2, fluent-operator-fips 3.10.0-r3, fulcio-fips 1.5.1-r3, fulcio-fips 1.6.6-r2, fulcio-fips 1.7.1-r3, git-lfs-fips 3.7.1-r1, gitea 1.26.4-r1, go-discover 0_git20250325-r4, gomplate 4.3.3-r3, gosu 1.19-r5, grafana-org-operator 1.13.0-r2, haproxy-ingress 0.13.19-r2, haproxy-ingress 0.14.12-r3, haproxy-ingress 0.15.4-r5, haproxy-ingress 0.16.1-r5, helm 3.21.4-r2, helm 4.0.5-r6, helm 4.1.4-r3, helm 4.2.3-r1, helm-fips 3.21.4-r0, helm-fips 4.2.4-r0, helm-operator 1.39.2-r2, helm-operator 1.40.0-r2, helm-operator 1.42.2-r4, helm-operator 1.42.3-r3, ingress-nginx-controller 1.12.8-r1, ingress-nginx-controller 1.13.9-r1, ingress-nginx-controller 1.14.5-r4, ingress-nginx-controller 1.15.1-r3, istio 1.29.6-r2, istio 1.30.3-r2, knative-net-istio 1.20.4-r3, knative-net-istio 1.21.4-r3, knative-net-istio 1.22.1-r1, knative-net-istio 1.23.0-r0, knative-serving 1.20.3-r1, knative-serving 1.21.3-r2, knative-serving 1.22.1-r3, knative-serving 1.23.0-r0, kube-metrics-adapter 0.2.9-r1, kube-state-metrics 2.16.0-r10, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-state-metrics-fips 2.20.0-r2, kube-vip 0.9.2-r1, kube-vip 1.0.4-r2, kube-vip 1.1.2-r4, kube-vip-fips 0.9.2-r1, kubernetes 1.33.13-r1, kubernetes 1.34.10-r5, kubernetes 1.35.7-r1, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-dns-node-cache 1.23.1-r1, kubernetes-dns-node-cache 1.24.1-r2, kubernetes-dns-node-cache 1.25.0-r9, kubernetes-dns-node-cache 1.26.8-r7, kustomize-fips 5.8.1-r1, local-path-provisioner-fips 0.0.36-r3, logstash-exporter 1.6.4-r1, logstash-exporter 1.7.1-r2, logstash-exporter 1.8.4-r2, logstash-exporter 1.9.1-r4, logstash-exporter-fips 1.6.4-r1, logstash-exporter-fips 1.7.1-r1, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, memcached-exporter 0.16.0-r2, metallb 0.13.12-r5, metallb 0.14.9-r4, metallb 0.15.3-r2, metallb 0.16.0-r3, minio-operator 6.0.4-r7, minio-operator 7.0.1-r7, minio-operator 7.1.1-r7, mongodb 8.0.29-r0, mongodb 8.1.3-r3, mongodb 8.3.8-r0, nats-streaming 0.22.1-r2, nats-streaming 0.23.2-r2, nats-streaming 0.24.6-r5, nats-streaming 0.25.6-r6, nginx-prometheus-exporter-fips 1.5.3-r1, ollama-fips 0.32.11-r1, ollama-fips 0.32.12-r1, ollama-fips 0.32.14-r1, ollama-fips 0.32.15-r2, opa-fips 1.19.1-r2, opentelemetry-collector-contrib 0.156.0-r0, opentelemetry-collector-contrib-fips 0.158.0-r3, opentelemetry-collector-contrib-fips 0.159.0-r2, prometheus 3.10.0-r8, prometheus 3.11.3-r6, prometheus-alertmanager 0.33.0-r2, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, prometheus-fips 3.12.0-r3, prometheus-mongodb-exporter-fips 0.53.0-r1, prometheus-mysqld-exporter 0.17.2-r5, prometheus-mysqld-exporter 0.18.0-r5, prometheus-mysqld-exporter 0.19.0-r4, prometheus-node-exporter 1.10.2-r4, prometheus-node-exporter 1.11.1-r3, prometheus-node-exporter 1.12.1-r1, prometheus-node-exporter 1.9.1-r4, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.11.1-r2, prometheus-operator 0.90.1-r3, prometheus-operator 0.91.0-r4, prometheus-operator 0.92.1-r2, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r3, prometheus-pushgateway-fips 1.8.0-r2, prometheus-redis-exporter 1.86.0-r2, prometheus-redis-exporter 1.87.0-r1, prometheus-redis-exporter 1.88.0-r3, prometheus-redis-exporter-fips 1.87.0-r3, prometheus-statsd-exporter 0.27.2-r1, prometheus-statsd-exporter 0.28.0-r3, prometheus-statsd-exporter 0.29.0-r0, rabbitmq-cluster-operator 2.20.1-r6, rabbitmq-cluster-operator 2.21.1-r3, rabbitmq-cluster-operator 2.22.4-r0, rabbitmq-messaging-topology-operator 1.18.3-r4, rabbitmq-messaging-topology-operator 1.19.3-r3, rabbitmq-messaging-topology-operator 1.2.1-r1, rclone 1.72.1-r12, rclone 1.73.5-r6, rclone 1.74.4-r1, renovate 44.31.0-r1, renovate 44.32.5-r2, restic 0.18.1-r5, sealed-secrets 0.35.0-r6, sealed-secrets 0.36.6-r4, sealed-secrets 0.37.0.r2, sealed-secrets 0.38.4-r0, stakater-reloader 1.1.0-r4, stakater-reloader 1.2.1-r3, stakater-reloader-fips 1.4.19-r1, step 0.27.5-r4, step 0.28.7-r5, step 0.29.0-r4, step-issuer 0.10.2-r5, step-issuer 0.11.0-r5, step-issuer 0.9.11-r3, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tekton-pipelines-fips 1.13.1-r2, tekton-pipelines-fips 1.14.0-r4, temporal-server 1.28.4-r2, temporal-server 1.29.7-r1, temporal-server 1.30.5-r1, temporal-server 1.30.6-r3, temporal-ui-server-fips 2.48.4-r1, temporal-ui-server-fips 2.49.1-r1, temporal-ui-server-fips 2.50.1-r1, terraform 1.15.7-r0, tigera-operator 1.42.1-r3, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, tkn 0.46.0-r1, trino 480-r10, trust-manager 0.21.1-r2, trust-manager 0.22.1-r3, trust-manager 0.23.0-r1, trust-manager 0.24.0-r1, vault 1.19.5-r3, vault 1.20.4-r9, vault 1.21.4-r10, vault 2.0.4-r3, vault-k8s 1.5.0.r3, vault-k8s 1.6.2-r2, vault-k8s 1.7.6-r0, velero 1.15.2-r7, velero 1.17.2-r8, velero 1.18.2-r7, velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.12.2-r9, velero-plugin-for-aws 1.13.2-r4, velero-plugin-for-aws 1.14.2-r1, velero-plugin-for-csi 0.4.3-r5, velero-plugin-for-csi 0.5.1-r4, velero-plugin-for-csi 0.6.3-r3, velero-plugin-for-csi 0.7.1-r5, victoriametrics-operator 0.71.0-r2, victoriametrics-operator-fips 0.69.0-r0, victoriametrics-operator-fips 0.70.1-r0, victoriametrics-operator-fips 0.71.0-r0, wave 0.10.0-r5, wave 0.8.0-r2, wave 0.9.0-r2, wave 011.0-r4, weaviate-fips 1.38.10-r2, weaviate-fips 1.38.11-r2

CVE-2026-33818 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.5CVSS5.9AI score0.00568EPSS

SaveExploits0References3

OSV•added 2026/09/18 9:29 a.m.•4 views

CLEANSTART-2026-ZL37756 Security fix for CVE-2024-55549 applied in: ingress-nginx-controller 1.12.8-r0, ingress-nginx-controller 1.14.5-r3

CVE-2024-55549 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.8CVSS7.3AI score0.00351EPSS

SaveExploits3References3

OSV•added 2026/09/18 9:29 a.m.•6 views

CLEANSTART-2026-WR91768 Security fix for CVE-2025-24855 applied in: ingress-nginx-controller 1.12.8-r0, ingress-nginx-controller 1.14.5-r3

CVE-2025-24855 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

7.8CVSS7.3AI score0.00351EPSS

SaveExploits1References3

OSV•added 2026/09/10 1:40 a.m.•10 views

CLEANSTART-2026-WZ31386 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the ingress-nginx-controller package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

9.8CVSS7.3AI score0.00692EPSS

SaveExploits5References45