{"vulnerability": "cve-2019-11253", "sightings": [{"uuid": "fbd64e08-15c6-4d0a-b24f-552b5a049782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://bsky.app/profile/bennettelder.net/post/3lp2t2bpbzk2x", "content": "", "creation_timestamp": "2025-05-13T15:40:29.496685Z"}, {"uuid": "37836bef-1c27-4f39-a631-c5fd0cbd67ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lp3wn5crqf2b", "content": "", "creation_timestamp": "2025-05-14T02:17:23.158053Z"}, {"uuid": "33156075-6a4f-4fca-8e8c-e4813fa5a57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-11253.yaml", "content": "", "creation_timestamp": "2025-12-26T15:26:28.000000Z"}, {"uuid": "7db37396-0be6-47a5-8cd5-bebcc7741486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbaarkzgqv2d", "content": "", "creation_timestamp": "2025-12-30T21:02:57.629221Z"}, {"uuid": "e6e369e7-7d10-482a-bf74-6ce74d1e3600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/ctinow/168766", "content": "https://ift.tt/HV5B4AI\nCVE-2019-11253 | Kubernetes up to 1.0-1.12/1.13.11/1.14.7/1.15.4/1.16.1 API Server JSON Payload input validation (RHSA-2019:3239)", "creation_timestamp": "2024-01-16T12:06:53.000000Z"}, {"uuid": "142eabe0-23f6-45ae-96e1-180d2508c9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/warmakerz/1174", "content": "The hilarious Billion Laughs vulnerability is essentially an XML bomb that causes denial of service through exponential entity expansion.\n\nThe attack defines a hierarchy of DTD entities , where each entity references multiple instances of the previous one, which leads to exponential growth of content during parsing and exhaustion of memory/CPU in the XML parser.\n\nBy the way, a similar technique exists for YAML, with the ironic name YAML-BOMB . Here anchors and aliases are expanded as macros, leading to DoS (for example, CVE-2019-11253 in Kubernetes)\n\n\u27a1\ufe0f\u27a1\ufe0f  @WarmakerZ  \u2b05\ufe0f\u2b05\ufe0f", "creation_timestamp": "2025-04-29T03:53:00.000000Z"}, {"uuid": "09ff5b8b-9717-4a92-b2e3-01a940c02631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/413", "content": "#exploit\n#Cloud_Security\nCVE-2019-11253:\nKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack\nhttps://github.com/kubernetes/kubernetes/issues/83253", "creation_timestamp": "2024-10-08T20:44:11.000000Z"}, {"uuid": "5c5ce964-ab7d-4fd3-ac93-e88e4ca7502b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/cibsecurity/7478", "content": "\u274c Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS \u274c\n\nThe flaws in the container technology, CVE-2019-16276 and CVE-2019-11253, are simple to exploit.\n\n\ud83d\udcd6 Read\n\nvia \"Threatpost\".", "creation_timestamp": "2019-10-17T16:32:14.000000Z"}, {"uuid": "e495d4a2-a47a-42bd-8194-ef3ee75018bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/oleg_log/2111", "content": "\u0412\u0447\u0435\u0440\u0430 \u0443\u0437\u043d\u0430\u043b \u043e \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043a\u0430\u043a: Billion laughs attack.\n\nbillion laughs attack is a type of denial-of-service (DoS) attack which is aimed at parsers of XML documents.\nIt is also referred to as an XML bomb or as an exponential entity expansion attack.\n\nhttps://en.wikipedia.org/wiki/Billion_laughs_attack\n\n\u041a\u043b\u0430\u0441\u0438\u043a\u0430, \u0432\u043e\u0442 \u0432 \u0436\u0430\u0432\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0436\u0441\u043e\u043d\u0430 \u0431\u044b\u043b\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 https://t.me/oleg_log/82\n\n\u0422\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0442\u0430\u043a\u043e\u0435 \u0436 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432 \u041a\u0443\u0431\u0435\u0440\u043d\u0435\u0442\u0435\u0441\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u044f\u043c\u043b\u043e\u043c (\u0441\u043c \u0441\u043a\u0440\u0438\u043d).\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253\nhttps://github.com/kubernetes/kubernetes/issues/83253\n\n\u041e\u0440\u0438\u0433 \u043d\u0430 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u043c https://sekurak.pl/oto-bomba-yaml-owa-potrafi-zniszczyc-api-kubernetesa/", "creation_timestamp": "2026-07-29T12:01:53.481266Z"}, {"uuid": "decaab13-b3e2-4155-ad37-6fd29968123a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11253", "type": "seen", "source": "https://t.me/oleg_log/2111", "content": "\u0412\u0447\u0435\u0440\u0430 \u0443\u0437\u043d\u0430\u043b \u043e \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043a\u0430\u043a: Billion laughs attack.\n\nbillion laughs attack is a type of denial-of-service (DoS) attack which is aimed at parsers of XML documents.\nIt is also referred to as an XML bomb or as an exponential entity expansion attack.\n\nhttps://en.wikipedia.org/wiki/Billion_laughs_attack\n\n\u041a\u043b\u0430\u0441\u0438\u043a\u0430, \u0432\u043e\u0442 \u0432 \u0436\u0430\u0432\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0436\u0441\u043e\u043d\u0430 \u0431\u044b\u043b\u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0435 https://t.me/oleg_log/82\n\n\u0422\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u0442\u0430\u043a\u043e\u0435 \u0436 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432 \u041a\u0443\u0431\u0435\u0440\u043d\u0435\u0442\u0435\u0441\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u044f\u043c\u043b\u043e\u043c (\u0441\u043c \u0441\u043a\u0440\u0438\u043d).\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11253\nhttps://github.com/kubernetes/kubernetes/issues/83253\n\n\u041e\u0440\u0438\u0433 \u043d\u0430 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u043c https://sekurak.pl/oto-bomba-yaml-owa-potrafi-zniszczyc-api-kubernetesa/", "creation_timestamp": "2026-07-30T00:02:05.144560Z"}]}