Docker Desktop 安全漏洞

Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

PT-2025-50250

Name of the Vulnerable Software and Affected Versions Docker Desktop affected versions not specified Description Docker Desktop diagnostics bundles include expired Hub PATs Personal Access Tokens in log output because of error object serialization. This can lead to the leakage of sensitive...

GO-2025-4179 Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode in github.com/docker/mcp-gateway

Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode in github.com/docker/mcp-gateway...

Exploit for CVE-2025-66478

CVE-2025-66478 – Next.js Server Actions RCE Vulnerability: Ana...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2025-086 (ALASDOCKER-2025-086)

The version of containerd installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-086 advisory. containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, aws-flb-cloudwatch, smokescreen, kubeflow, kube-fluentd-operator, gostatsd, src-fingerprint, docker-credential-gcr, neuvector-dbgen, newrelic-nri-statsd, kpt, aws-flb-firehose, terraform-provider-google, go-discover, hello-world-golang,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, aws-flb-cloudwatch, smokescreen, kubeflow, kube-fluentd-operator, gostatsd, src-fingerprint, docker-credential-gcr, neuvector-dbgen, newrelic-nri-statsd, kpt, aws-flb-firehose, terraform-provider-google, go-discover, hello-world-golang,...

Exploit for CVE-2025-9074

CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...

nim-pentest-agent

NimPentestAgent Agent autonome de pentest intelligent pour CT...

SUSE CVE-2025-12744

A flaw was found in the ABRT daemon's handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command docker inspect %s without proper validation. An unprivileged local user can craft a payload that injects shell...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demo...

Exploit for Deserialization of Untrusted Data in Getlaminas Laminas-Http

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE ==========...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

Exploit for CVE-2025-55182

CVE-2025-55182 - Dockerized Proof of Concept This repository...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: helm-docs, newrelic-k8s-metadata-injection, grafana-mimir, crossplane-provider-keycloak, github-mcp-server, glow, falco-no-driver, kbld, k8sgpt-operator, tofu-controller, migrate, aws-nuke, harbor, sonobuoy, influx, terraform-provider-google, kubernetes-dashboard,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: helm-docs, newrelic-k8s-metadata-injection, grafana-mimir, crossplane-provider-keycloak, github-mcp-server, glow, falco-no-driver, kbld, k8sgpt-operator, tofu-controller, migrate, aws-nuke, harbor, sonobuoy, influx, terraform-provider-google, kubernetes-dashboard,...

Exploit for CVE-2025-55182

CVE-2025-55182-docker-lab Vulnerable Docker environment for l...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

Linux Distros Unpatched Vulnerability : CVE-2025-12744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ABRT daemon's handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them direct...