poc_CVE-2018-1002105

CVE-2018-1002105 PoC 인증된 PoC 데모 사용법 인증되지 않은 PoC 데모 사용법 인증된 PoC CVE-2018-1002105에 대한 Proof-of-Concept 익스플로잇입니다. 현재 익스플로잇은 pods와 pods/exec에 대한 create 및 get 권한이 필요합니다. portforward 및 attach에 대한 지원이 추가되었으며, 이와 유사한 권한이 필요합니다. 현재 PoC는 기본 etcd-kubernetes 파드에서 시크릿을 덤프합니다. 데모 작동 중인 PoC: 사용법 root@kitploit:...

CVE-2026-18608

The vulnerability CVE-2026-18608 affects the Data Science Pipelines Operator (DSPO). Its ClusterRole grants excessive privileges beyond what is needed, including pods/exec and cluster-wide role/binding control. If a DSPO pod is compromised, an attacker could leverage these permissions to achieve ...

CVE-2026-18608

A flaw was found in the Data Science Pipelines Operator DSPO. The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wi...

CVE-2026-35469

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...