CVE-2026-56261 Crawl4AI - Server-Side Request Forgery via Webhook URLs

Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...

EUVD-2026-42880

Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...

CVE-2026-56261

Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...

Linux Container Escape Check

Assess Docker socket, capabilities, cgroups, mount namespaces, and privileged container indicators from kittysploit import from lib.post.linux.system import System from lib.post.linux.session import LinuxSessionMixin class ModulePost, System, LinuxSessionMixin: info = "name": "Linux Container...

Docker API Exposure Verification

Confirms unauthenticated Docker Engine /version and /containers/json on TCP 2375. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Docker Engine API on TCP 2375.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.docker.detectors...

Harbor Registry Detection

Detects Harbor registry systeminfo API and sign-in UI. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Harbor container registry.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Harbor Registry Detection"...

Portainer Detection

Detects Portainer API status and web UI exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Portainer container management UI.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Portainer Detection",...

[SECURITY] Fedora 43 Update: kind-0.31.0-4.fc43

Kubernetes IN Docker - local clusters for testing Kubernetes...

[SECURITY] Fedora 44 Update: kind-0.31.0-4.fc44

Kubernetes IN Docker - local clusters for testing Kubernetes...

openSUSE 16 Security Update : docker-compose (openSUSE-SU-2026:21247-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21247-1 advisory. This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-2525)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

CVE-2026-56261: Server-Side Request Forgery (SSRF)

Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-2585)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: beats-fips, elastic-agent-fips, kubernetes-csi-node-driver-registrar, grype-fips, kubernetes-csi-node-driver-registrar-fips, authentik, cloud-provider-azure, pulumi-language-dotnet, jaeger-fips, cerbos, prometheus, karpenter, nvidia-nsight-compute-13.1, zarf, src,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: telegraf, grafana-alloy, caddy, kubeflow-katib, kubernetes-dashboard, prometheus-operator, trino, loki, snyk-cli, grafana-operator, k3s, melange, src, vexctl, libnvidia-container, pinact, kots, fuse-overlayfs-snapshotter, mattermost, glab, docker, kubernetes,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: cfssl, neuvector-dbgen, terraform-provider-time, boring-registry, emissary, kyverno-policy-reporter-ui, terraform-provider-acme, cosign, skaffold, kine, ctop, argo-cd, conftest, eksctl, calico, crossplane-provider-aws-kinesis, crossplane-provider-sql, tfsec,...

CVE-2026-59726 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminalexecute, obtain...

CVE-2026-59726 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminalexecute, obtain...

CVE-2026-59726

Affected software: Ruflo, an agent meta-harness for Claude Code and Codex. Vulnerability: unauthenticated access to the MCP bridge endpoints POST /mcp and POST /mcp/:group in the default docker-compose deployment prior to version 3.16.3. Root cause / impact: unauthenticated network attacker could...

CVE-2026-59726 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminalexecute, obtain...