{"vulnerability": "cve-2019-11253", "sightings": [{"uuid": "fbd64e08-15c6-4d0a-b24f-552b5a049782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://bsky.app/profile/bennettelder.net/post/3lp2t2bpbzk2x", "content": "", "creation_timestamp": "2025-05-13T15:40:29.496685Z"}, {"uuid": "37836bef-1c27-4f39-a631-c5fd0cbd67ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lp3wn5crqf2b", "content": "", "creation_timestamp": "2025-05-14T02:17:23.158053Z"}, {"uuid": "33156075-6a4f-4fca-8e8c-e4813fa5a57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-11253.yaml", "content": "", "creation_timestamp": "2025-12-26T15:26:28.000000Z"}, {"uuid": "7db37396-0be6-47a5-8cd5-bebcc7741486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbaarkzgqv2d", "content": "", "creation_timestamp": "2025-12-30T21:02:57.629221Z"}, {"uuid": "e6e369e7-7d10-482a-bf74-6ce74d1e3600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/ctinow/168766", "content": "https://ift.tt/HV5B4AI\nCVE-2019-11253 | Kubernetes up to 1.0-1.12/1.13.11/1.14.7/1.15.4/1.16.1 API Server JSON Payload input validation (RHSA-2019:3239)", "creation_timestamp": "2024-01-16T12:06:53.000000Z"}, {"uuid": "63706b3a-1234-47c6-b260-62b5e497982f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "published-proof-of-concept", "source": "https://t.me/oleg_log/2111", "content": "\u0412\u0447\u0435\u0440\u0430 \u0443\u0437\u043d\u0430\u043b \u043e \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043a\u0430\u043a: Billion laughs attack.\n\nbillion laughs attack is a type of denial-of-service (DoS) attack which is aimed at parsers of XML documents.\nIt is also referred to as an XML bomb or as an exponential entity expansion attack.\n\nhttps://en.wikipedia.org/wiki/Billion_laughs_attack\n\n\u041a\u043b\u0430\u0441\u0438\u043a\u0430, \u0432\u043e\u0442 \u0432 \u0436\u0430\u0432\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0436\u0441\u043e\u043d\u0430 \u0431\u044b\u043b\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 https://t.me/oleg_log/82\n\n\u0422\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0442\u0430\u043a\u043e\u0435 \u0436 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432 \u041a\u0443\u0431\u0435\u0440\u043d\u0435\u0442\u0435\u0441\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u044f\u043c\u043b\u043e\u043c (\u0441\u043c \u0441\u043a\u0440\u0438\u043d).\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253\nhttps://github.com/kubernetes/kubernetes/issues/83253\n\n\u041e\u0440\u0438\u0433 \u043d\u0430 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u043c https://sekurak.pl/oto-bomba-yaml-owa-potrafi-zniszczyc-api-kubernetesa/", "creation_timestamp": "2026-08-01T18:00:05.452489Z"}, {"uuid": "142eabe0-23f6-45ae-96e1-180d2508c9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/warmakerz/1174", "content": "The hilarious Billion Laughs vulnerability is essentially an XML bomb that causes denial of service through exponential entity expansion.\n\nThe attack defines a hierarchy of DTD entities , where each entity references multiple instances of the previous one, which leads to exponential growth of content during parsing and exhaustion of memory/CPU in the XML parser.\n\nBy the way, a similar technique exists for YAML, with the ironic name YAML-BOMB . Here anchors and aliases are expanded as macros, leading to DoS (for example, CVE-2019-11253 in Kubernetes)\n\n\u27a1\ufe0f\u27a1\ufe0f  @WarmakerZ  \u2b05\ufe0f\u2b05\ufe0f", "creation_timestamp": "2025-04-29T03:53:00.000000Z"}, {"uuid": "09ff5b8b-9717-4a92-b2e3-01a940c02631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/413", "content": "#exploit\n#Cloud_Security\nCVE-2019-11253:\nKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack\nhttps://github.com/kubernetes/kubernetes/issues/83253", "creation_timestamp": "2024-10-08T20:44:11.000000Z"}, {"uuid": "5c5ce964-ab7d-4fd3-ac93-e88e4ca7502b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/cibsecurity/7478", "content": "\u274c Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS \u274c\n\nThe flaws in the container technology, CVE-2019-16276 and CVE-2019-11253, are simple to exploit.\n\n\ud83d\udcd6 Read\n\nvia \"Threatpost\".", "creation_timestamp": "2019-10-17T16:32:14.000000Z"}, {"uuid": "a5f66ae7-fa7d-4b28-8284-ec3fbfd0dad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "published-proof-of-concept", "source": "https://t.me/oleg_log/2111", "content": "\u0412\u0447\u0435\u0440\u0430 \u0443\u0437\u043d\u0430\u043b \u043e \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043a\u0430\u043a: Billion laughs attack.\n\nbillion laughs attack is a type of denial-of-service (DoS) attack which is aimed at parsers of XML documents.\nIt is also referred to as an XML bomb or as an exponential entity expansion attack.\n\nhttps://en.wikipedia.org/wiki/Billion_laughs_attack\n\n\u041a\u043b\u0430\u0441\u0438\u043a\u0430, \u0432\u043e\u0442 \u0432 \u0436\u0430\u0432\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0436\u0441\u043e\u043d\u0430 \u0431\u044b\u043b\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 https://t.me/oleg_log/82\n\n\u0422\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0442\u0430\u043a\u043e\u0435 \u0436 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432 \u041a\u0443\u0431\u0435\u0440\u043d\u0435\u0442\u0435\u0441\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u044f\u043c\u043b\u043e\u043c (\u0441\u043c \u0441\u043a\u0440\u0438\u043d).\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253\nhttps://github.com/kubernetes/kubernetes/issues/83253\n\n\u041e\u0440\u0438\u0433 \u043d\u0430 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u043c https://sekurak.pl/oto-bomba-yaml-owa-potrafi-zniszczyc-api-kubernetesa/", "creation_timestamp": "2026-08-02T00:00:24.118529Z"}, {"uuid": "e495d4a2-a47a-42bd-8194-ef3ee75018bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/oleg_log/2111", "content": "\u0412\u0447\u0435\u0440\u0430 \u0443\u0437\u043d\u0430\u043b \u043e \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043a\u0430\u043a: Billion laughs attack.\n\nbillion laughs attack is a type of denial-of-service (DoS) attack which is aimed at parsers of XML documents.\nIt is also referred to as an XML bomb or as an exponential entity expansion attack.\n\nhttps://en.wikipedia.org/wiki/Billion_laughs_attack\n\n\u041a\u043b\u0430\u0441\u0438\u043a\u0430, \u0432\u043e\u0442 \u0432 \u0436\u0430\u0432\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0436\u0441\u043e\u043d\u0430 \u0431\u044b\u043b\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 https://t.me/oleg_log/82\n\n\u0422\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0442\u0430\u043a\u043e\u0435 \u0436 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432 \u041a\u0443\u0431\u0435\u0440\u043d\u0435\u0442\u0435\u0441\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u044f\u043c\u043b\u043e\u043c (\u0441\u043c \u0441\u043a\u0440\u0438\u043d).\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253\nhttps://github.com/kubernetes/kubernetes/issues/83253\n\n\u041e\u0440\u0438\u0433 \u043d\u0430 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u043c https://sekurak.pl/oto-bomba-yaml-owa-potrafi-zniszczyc-api-kubernetesa/", "creation_timestamp": "2026-07-29T12:01:53.481266Z"}, {"uuid": "decaab13-b3e2-4155-ad37-6fd29968123a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/oleg_log/2111", "content": "\u0412\u0447\u0435\u0440\u0430 \u0443\u0437\u043d\u0430\u043b \u043e \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043a\u0430\u043a: Billion laughs attack.\n\nbillion laughs attack is a type of denial-of-service (DoS) attack which is aimed at parsers of XML documents.\nIt is also referred to as an XML bomb or as an exponential entity expansion attack.\n\nhttps://en.wikipedia.org/wiki/Billion_laughs_attack\n\n\u041a\u043b\u0430\u0441\u0438\u043a\u0430, \u0432\u043e\u0442 \u0432 \u0436\u0430\u0432\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0436\u0441\u043e\u043d\u0430 \u0431\u044b\u043b\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 https://t.me/oleg_log/82\n\n\u0422\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0442\u0430\u043a\u043e\u0435 \u0436 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432 \u041a\u0443\u0431\u0435\u0440\u043d\u0435\u0442\u0435\u0441\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u044f\u043c\u043b\u043e\u043c (\u0441\u043c \u0441\u043a\u0440\u0438\u043d).\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253\nhttps://github.com/kubernetes/kubernetes/issues/83253\n\n\u041e\u0440\u0438\u0433 \u043d\u0430 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u043c https://sekurak.pl/oto-bomba-yaml-owa-potrafi-zniszczyc-api-kubernetesa/", "creation_timestamp": "2026-07-30T00:02:05.144560Z"}, {"uuid": "79c37bdf-edef-4bc8-9d6b-220db0b1c0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-01T20:02:39.239896Z"}, {"uuid": "02e22c8d-3aa0-4206-95c3-abbf212fe071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-02T01:03:15.099634Z"}, {"uuid": "de0b2490-ccfd-476c-b175-8691ba6621bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-08T04:00:03.963250Z"}, {"uuid": "f86b1a89-488f-4260-b371-2c6c62c40773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-09T00:00:42.414763Z"}]}