CVE-2026-116102

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function buildwindowscommand of the file dockerexecutor.py. This manipulation of the argument projectname causes os command injection. It is possible to initiate the attack remotely...

CVE-2026-116102 QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function buildwindowscommand of the file dockerexecutor.py. This manipulation of the argument projectname causes os command injection. It is possible to initiate the attack remotely...

CVE-2026-116102

The QuantGeekDev docker-mcp software (versions 0.1.0/0.2.0 ) is vulnerable to an os command injection flaw. The vulnerability exists in the _build_windows_command function within the docker_executor.py file. Improper handling of the project_name argument allows an attacker to inject operating sys...

EUVD-2026-109587

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function buildwindowscommand of the file dockerexecutor.py. This manipulation of the argument projectname causes os command injection. It is possible to initiate the attack remotely...

CVE-2026-116102 QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function buildwindowscommand of the file dockerexecutor.py. This manipulation of the argument projectname causes os command injection. It is possible to initiate the attack remotely...

PT-2026-123129

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function build windows command of the file docker executor.py. This manipulation of the argument project name causes os command injection. It is possible to initiate the attack remotely...

PT-2026-123360

boneIO black debian images gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This issue was fixed in version 1.6.0: the...

homelab-CVE-2025-68613

How to Use Docker Compose for This Project This guide explains how to install Docker Compose and run the project using the provided docker-compose.yml file. Prerequisites Docker must be installed on your system. See the official Docker installation guide for instructions. Installing Docker Compos...

CVE-2024-54951

Monica-Stored-XSS-Vulnerability CVE-2024-54951 CVE-2024-54951 I contacted the monica development team via email on 11/20/2024. I also contacted them via LinkedIn through connection message attempt, and other platforms in the weeks that followed. Publishing here since there was no response after 3...

exploit-CVE-2017-6090

Containerized exploitable CVE-2017-6090 This projects builds a container running PhpCollab 2.5.1, containing a remote code execution vulnerability as detailed in CVE-2017-6090. In addition, there is a docker-compse file to start that container and mysql to show the demo, and instructions to explo...

CVE-2024-49368

Nginx UI Exploit Setup This guide outlines the steps to set up Nginx UI using Docker Compose, create a user, run an exploit, and verify the results within the Docker container. Prerequisites Ensure you have Docker and Docker Compose installed on your machine. Familiarity with basic command-line...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Unchained Isolated adversary-emulation lab for PHP S...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

Cisco-FMC-honeypot

FMC-Trap A low-interaction honeypot that mimics a Cisco Secure Firewall Management Center FMC web surface and captures unauthenticated Java serialization-style attack traffic CVE-style insecure deserialization probes. Safe by design: the application does not deserialize Java objects; it detects...

CVE-2026-39808

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...

cve-2018-3811

CVE-2018-3811 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-3811 Image author: https://github.com/cved-sources/cve-2018-3811...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shellX Next-generation exploit orchestrator for CVE-2026-...

CVE-2026-116070

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems link...