CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller Vulnerability Analysis and PoC Environment Setup Test Environment MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Local Test Environment Setup M2 MacOS Install minikube for local testing minikube start...

Redis-RCE

redis-rce Redis 4.x/5.x RCE Usage root@kitploit: usage: redis-rce.py -h -r RHOST -p RPORT -L LHOST -P LPORT -f FILE -a AUTH -v Redis 4.x/5.x RCE with RedisModules optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST target host -p RPORT, --rport RPORT target redi...

CVE-2025-32463

CVE-2025-32463 - Sudo 权限提升 PoC /////// 免责声明 ///////////////////////////////////////////////////////////////////////////////////////////////////////////////// 本项目仅供教育目的使用。 使用本仓库的任何部分，即表示您确认不会利用其中包含的代码或技术来未经授权访问 您不拥有或未经明确许可进行测试的系统。 作者（nflatrea）对本概念验证或相关材料的任何滥用、损害或后果不承担任何责任或义务， 您同意自行承担使用本代码的风险。...

GHSA-J48Q-4C78-RHF9 openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification

Severity: HIGH Summary The Whirlpool hash implementation in opensslencrypt/modules/registry/hashregistry.py at lines 570-589 uses glob patterns to find .so modules in site-packages and loads the first match via importlib without verifying module integrity. Affected Code python for sitepkg in...

USN-6945-1: wpa_supplicant and hostapd vulnerability

Rory McNamara discovered that wpasupplicant could be made to load arbitrary shared objects by unprivileged users that have access to the control interface. An attacker could use this to escalate privileges to root...