EUVD-2025-205598

Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected in tugtainer-agent POST api/command/run. Version 1.15.1 fixes the issue...

Exploit for CVE-2025-14847

Eric Capuano^1 posted an excellent blog regarding Mongo...

Exploit for CVE-2025-68613

n8n CVE-2025-68613 — Lab Disclaimer This repository conta...

hacker-man

Hacker Man - Vulnerable Web Applications Lab A collection of...

Exploit for CVE-2025-9074

CVE-2025-9074 Docker Container Command Execution Tool A power...

Exploit for CVE-2025-9074

CVE-2025-9074 Docker Container Command Execution Tool A power...

[SECURITY] Fedora 42 Update: docker-buildkit-0.26.3-1.fc42

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 43 Update: docker-buildkit-0.26.3-1.fc43

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

Fedora: Security Advisory (FEDORA-2025-94f9b9b1b1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : docker-buildkit (2025-9cf9edf688)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9cf9edf688 advisory. - Update to release v0.26.3 - Resolves CVE-2024-25621: rhbz2419004, rhbz2419033, rhbz2419427 - Upstream fix Tenable has extracted the preceding...

Fedora: Security Advisory (FEDORA-2025-9cf9edf688)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-36154

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories

It's getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they're blending in, hijacking everyday tools, trusted apps, and even AI assistants. What used to feel like clear-cut "hacker stories" now looks more like a mirror of the...

Exploit for CVE-2025-59532

CVE-2025-59532 Docker Environment A Docker-based research env...

Fedora 43 : docker-buildkit (2025-94f9b9b1b1)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-94f9b9b1b1 advisory. - Update to release v0.26.3 - Resolves CVE-2024-25621: rhbz2419004, rhbz2419033, rhbz2419427 - Upstream fix Tenable has extracted the preceding...

CVE-2025-36154

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

CVE-2025-36154

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

CVE-2025-36154

CVE-2025-36154 affects IBM Concert Software versions 1.0.0 through 2.1.0. Multiple connected sources confirm a cleartext information disclosure during recursive docker builds, enabling a local user to obtain sensitive data. The vulnerability stems from plaintext storage within docker build contex...