CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4. A patched version of the package is available...

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...

vulnlab-platform-lab

Local VulnLab Platform The Local VulnLab Platform is a vulner...

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 CVSS score: 10.0, impacts all...

CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the docker cp mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could...

cve-2026-47873 - HIGH - CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback...

NewStart CGSL MAIN 6.06 : docker-ce Vulnerability (NS-SA-2026-0054)

The remote NewStart CGSL host, running version MAIN 6.06, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is bui...

Fedora 45 : docker-buildx (2026-c37317fdde)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...

globalping-probe v0.50.0

Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...

Docker Daemon Exposed Detection

Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and potentially the host system. !/usr/bin/env python3 -- coding: utf-8 -- """Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and .""...

Flask Redis Queue Docker - Exposure Detection

Flask Redis Queue Docker is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Flask Redis Queue Docker is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flask Redis Queue Docker - Exposure Detection',...

Docker Cloud Yaml - File Disclosure Detection

Docker cloud internal yaml file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Docker cloud internal yaml file is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docker Cloud Yaml - File...

Docker Registry Browser - Detect

Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in the HTTP response. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in.""" from...

Dozzle - Logs Exposure Detection

Dozzle is a small lightweight application with a web based interface to monitor Docker logs. It doesn’t store any log files. It is for live monitoring of your container logs only. !/usr/bin/env python3 -- coding: utf-8 -- """Dozzle is a small lightweight application with a web based interface to...

Docker Compose - Detect

Multiple Docker Compose configuration files were detected. The configuration allows deploy, combine and configure operations on multiple containers at the same time. The default is to outsource each process to its own container, which is then publicly accessible. !/usr/bin/env python3 -- coding:...

Yacht Login Panel - Detect

Yacht is a web management platform for managing Docker containers. !/usr/bin/env python3 -- coding: utf-8 -- """Yacht is a web management platform for managing Docker containers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Docker Container - Misconfiguration Exposure Detection

A Docker container misconfiguration was discovered. The Docker daemon can listen for Docker Engine API requests via three different types of Socket - unix, tcp, and fd. With tcp enabled, the default setup provides un-encrypted and un-authenticated direct access to the Docker daemon. It is...

Detect .dockercfg

Docker registry authentication data !/usr/bin/env python3 -- coding: utf-8 -- """Docker registry authentication data.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect .dockercfg', 'description': 'Docker registr...

AWS Elastic Beanstalk Dockerrun.aws.json - Exposure Detection

Detected AWS Elastic Beanstalk Dockerrun.aws.json configuration file was publicly accessible, potentially revealing Docker container definitions, image names, hostnames, port mappings, and infrastructure details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected AWS Elastic Beanstalk...

Kong Admin <=2.03 - Admin API Access Detection

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Kong Admin through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...