Metasploit-Module-TFM

Module Metasploit personnalisé pour CVE 2023-2728 et CVE 2024-3177 Description Ce module personnalisé exploite CVE 2023-2728 et CVE 2024-3177 dans les versions de Kubernetes qui sont vulnérables à chacune d'elles par exemple, v1.27.2 est vulnérable aux deux, toutes deux liées au contournement de...

SUSE-SU-2025:02423-2 Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: Escape terminal special characters in kubectl output bsc1194400. - CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement bsc1212493. - CVE-2024-0793: Advance autoscaling v2 as the preferred API version...

CVE-2024-3177: Improper Input Validation

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2023-2728: Improper Input Validation

Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field...