{"vulnerability": "CVE-2019-9512", "sightings": [{"uuid": "7c5b3844-93c8-4f0f-8343-1d9833fd3741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/KaitNews/8361", "content": "\u26a0\ufe0f \u0646\u0642\u0635 \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2\n\n\ud83d\udd34 \u06a9\u0634\u0641 \u06f8 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2 \u06a9\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0647 DoS \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0634\u0641 \u0634\u062f\u0647 :\n\n\u2705 CVE-2019-9511 \u2014 HTTP/2  \"Data Dribble\" \n\u2705 CVE-2019-9512 \u2014 HTTP/2  \"Ping Flood\" \n\u2705 CVE-2019-9513 \u2014 HTTP/2  \"Resource Loop\" \n\u2705 CVE-2019-9514 \u2014 HTTP/2  \"Reset Flood\" \n\u2705 CVE-2019-9515 \u2014 HTTP/2  \"Settings Flood\" \n\u2705 CVE-2019-9516 \u2014 HTTP/2  \"0-Length Headers Leak\" \n\u2705 CVE-2017-9517 \u2014 HTTP/2  \"Internal Data Buffering\" \n\u2705 CVE-2019-9518 \u2014 HTTP/2  \"Request Data/Header Flood\" \n\n@KaitNews", "creation_timestamp": "2026-07-30T00:03:19.021775Z"}, {"uuid": "5ddb52e7-e99e-4b54-99a3-cbf99fc660bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/SaturnSpark/3441", "content": "NEWS:\n+NEW METHOD \n-RAPIDRST\nBYPASS HTTPDDOS\n_\n+exploits:\nCVE-2016-6581, \nCVE-2019-9512, CVE-2023-44487\n__\nbest regards \n@strstring", "creation_timestamp": "2024-02-26T16:31:09.000000Z"}, {"uuid": "b397d5fa-6e43-4b91-984b-2d4c3d19c2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/KaitNews/8361", "content": "\u26a0\ufe0f \u0646\u0642\u0635 \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2\n\n\ud83d\udd34 \u06a9\u0634\u0641 \u06f8 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2 \u06a9\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0647 DoS \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0634\u0641 \u0634\u062f\u0647 :\n\n\u2705 CVE-2019-9511 \u2014 HTTP/2  \"Data Dribble\" \n\u2705 CVE-2019-9512 \u2014 HTTP/2  \"Ping Flood\" \n\u2705 CVE-2019-9513 \u2014 HTTP/2  \"Resource Loop\" \n\u2705 CVE-2019-9514 \u2014 HTTP/2  \"Reset Flood\" \n\u2705 CVE-2019-9515 \u2014 HTTP/2  \"Settings Flood\" \n\u2705 CVE-2019-9516 \u2014 HTTP/2  \"0-Length Headers Leak\" \n\u2705 CVE-2017-9517 \u2014 HTTP/2  \"Internal Data Buffering\" \n\u2705 CVE-2019-9518 \u2014 HTTP/2  \"Request Data/Header Flood\" \n\n@KaitNews", "creation_timestamp": "2026-07-26T07:01:51.264110Z"}, {"uuid": "40a9e95f-d1f7-49fe-99e2-d7a15d153a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/KaitNews/8361", "content": "\u26a0\ufe0f \u0646\u0642\u0635 \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2\n\n\ud83d\udd34 \u06a9\u0634\u0641 \u06f8 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2 \u06a9\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0647 DoS \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0634\u0641 \u0634\u062f\u0647 :\n\n\u2705 CVE-2019-9511 \u2014 HTTP/2  \"Data Dribble\" \n\u2705 CVE-2019-9512 \u2014 HTTP/2  \"Ping Flood\" \n\u2705 CVE-2019-9513 \u2014 HTTP/2  \"Resource Loop\" \n\u2705 CVE-2019-9514 \u2014 HTTP/2  \"Reset Flood\" \n\u2705 CVE-2019-9515 \u2014 HTTP/2  \"Settings Flood\" \n\u2705 CVE-2019-9516 \u2014 HTTP/2  \"0-Length Headers Leak\" \n\u2705 CVE-2017-9517 \u2014 HTTP/2  \"Internal Data Buffering\" \n\u2705 CVE-2019-9518 \u2014 HTTP/2  \"Request Data/Header Flood\" \n\n@KaitNews", "creation_timestamp": "2026-07-27T00:01:34.463830Z"}, {"uuid": "3e2f9e46-3582-4d6b-9771-e30cb2e72104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/KaitNews/8361", "content": "\u26a0\ufe0f \u0646\u0642\u0635 \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2\n\n\ud83d\udd34 \u06a9\u0634\u0641 \u06f8 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP/2 \u06a9\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0647 DoS \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0634\u0641 \u0634\u062f\u0647 :\n\n\u2705 CVE-2019-9511 \u2014 HTTP/2  \"Data Dribble\" \n\u2705 CVE-2019-9512 \u2014 HTTP/2  \"Ping Flood\" \n\u2705 CVE-2019-9513 \u2014 HTTP/2  \"Resource Loop\" \n\u2705 CVE-2019-9514 \u2014 HTTP/2  \"Reset Flood\" \n\u2705 CVE-2019-9515 \u2014 HTTP/2  \"Settings Flood\" \n\u2705 CVE-2019-9516 \u2014 HTTP/2  \"0-Length Headers Leak\" \n\u2705 CVE-2017-9517 \u2014 HTTP/2  \"Internal Data Buffering\" \n\u2705 CVE-2019-9518 \u2014 HTTP/2  \"Request Data/Header Flood\" \n\n@KaitNews", "creation_timestamp": "2026-07-29T02:00:04.171164Z"}, {"uuid": "b266e09b-3a7e-4a13-ad56-d56087b30d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-01T20:02:39.522254Z"}, {"uuid": "fc30c49e-3094-4d83-b078-4f0c0f867bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "seen", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-02T01:03:15.282787Z"}, {"uuid": "703aa6eb-22a9-44f4-8af2-6a3b447c6778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-08T04:00:03.819052Z"}, {"uuid": "829a41aa-4927-4bb5-80ed-f3283fbe6228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9512", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-09T00:00:42.267411Z"}]}