13573 matches found
CVE-2026-42306
A flaw was found in the Moby container framework. A race condition occurs during the docker cp mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could...
cve-2026-47873 - HIGH - CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback...
Fedora 45 : docker-buildx (2026-c37317fdde)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...
NewStart CGSL MAIN 6.06 : docker-ce Vulnerability (NS-SA-2026-0054)
The remote NewStart CGSL host, running version MAIN 6.06, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is bui...
globalping-probe v0.50.0
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...
Detect .dockercfg
Docker registry authentication data !/usr/bin/env python3 -- coding: utf-8 -- """Docker registry authentication data.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect .dockercfg', 'description': 'Docker registr...
Docker Compose - Detect
Multiple Docker Compose configuration files were detected. The configuration allows deploy, combine and configure operations on multiple containers at the same time. The default is to outsource each process to its own container, which is then publicly accessible. !/usr/bin/env python3 -- coding:...
Yacht Login Panel - Detect
Yacht is a web management platform for managing Docker containers. !/usr/bin/env python3 -- coding: utf-8 -- """Yacht is a web management platform for managing Docker containers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...
AWS Elastic Beanstalk Dockerrun.aws.json - Exposure Detection
Detected AWS Elastic Beanstalk Dockerrun.aws.json configuration file was publicly accessible, potentially revealing Docker container definitions, image names, hostnames, port mappings, and infrastructure details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected AWS Elastic Beanstalk...
Docker Registry Browser - Detect
Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in the HTTP response. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in.""" from...
Docker Daemon Exposed Detection
Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and potentially the host system. !/usr/bin/env python3 -- coding: utf-8 -- """Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and .""...
Arcane Login Panel - Detect
Detects the presence of the Arcane login panel, a modern Docker management platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the Arcane login panel, a modern Docker management platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...
Kong Admin <=2.03 - Admin API Access Detection
Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Kong Admin through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
Docker Cloud Yaml - File Disclosure Detection
Docker cloud internal yaml file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Docker cloud internal yaml file is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docker Cloud Yaml - File...
Dozzle - Logs Exposure Detection
Dozzle is a small lightweight application with a web based interface to monitor Docker logs. It doesn’t store any log files. It is for live monitoring of your container logs only. !/usr/bin/env python3 -- coding: utf-8 -- """Dozzle is a small lightweight application with a web based interface to...
Flask Redis Queue Docker - Exposure Detection
Flask Redis Queue Docker is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Flask Redis Queue Docker is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flask Redis Queue Docker - Exposure Detection',...
Docker Container - Misconfiguration Exposure Detection
A Docker container misconfiguration was discovered. The Docker daemon can listen for Docker Engine API requests via three different types of Socket - unix, tcp, and fd. With tcp enabled, the default setup provides un-encrypted and un-authenticated direct access to the Docker daemon. It is...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
