CVE-2025-9074

CVE-2025-9074 - Docker Remote API Lab PoC ⚠️ Disclaimer: This repository is for educational and research purposes only. Do not use this code outside of a controlled environment that you own. The author is not responsible for misuse. Overview This repository contains a proof-of-concept PoC for...

cve-2025-9074-poc

CVE-2025-9074 Educational PoC / Proof of Concept Code This repository contains a PoC for educational purposes that demonstrates the risk of exploiting Docker Engine's unauthenticated remote API to create a privileged container with read/write access to the host filesystem. The executable file is...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Overview This repository provides a Proof-of-Concept PoC exploit for CVE-2025-9074 , which involves unauthenticated exposure of the Docker Engine API on TCP port 2375. An attacker who can access this exposed API can: Interact with the Docker...

CVE-2025-9074-POC

CVE-2025-9074-POC Proof-of-Concept exploit for CVE-2025-9074 ⚠️ Legal Disclaimer This PoC is released for educational and authorized security testing purposes only. Unauthorized exploitation of systems is illegal and unethical. Use this PoC only on environments you own or have explicit permission...

CVE-2025-9074-Poc

RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecución local se conecten a la API del motor de Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour This code is for educational purposes only and controlled environments such as laboratories Hack The Box. Do not use on systems without authorization. This repository contains an exploit script for the Docker Remote API exposed without authentication...

CVE-2025-9074

CVE-2025-9074: Docker Engine API Unauthenticated RCE Severity : CRITICAL | CVSS Score : 9.8 estimated | Affected Versions : Docker Desktop 4.44.3 A proof-of-concept exploit for CVE-2025-9074, an unauthenticated Remote Code Execution vulnerability in Docker Engine API that allows privileged...

CGA-FQQ4-9RG8-2375

Bulletin has no description...

MINI-2375-2VHR-5M56

Bulletin has no description...

MAL-2026-2375 Malicious code in nf-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7 The package nf-console was found to contain malicious code...

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...

CVE-2021-2375

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2014-2375

creationtimestamp| type| source ---|---|--- 2025-10-13 23:15:50+00:00| seen| Telegram/ySOUmOpn50kdTBJ2ZlGwivi2c9fkWAYoBS3aqv9jIaKI...

EUVD-2016-10035

Malware in sbrugna...

Exploit for CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Ov...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

CVE-2025-9074 Docker Desktop allows unauthenticated access to Docker Engine API from containers

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

CVE-2025-9074

CVE-2025-9074 : Docker Desktop exposes the Docker Engine API on the internal subnet (example: 192.168.65.7:2375) without authentication, enabling a container to create a privileged container that mounts host filesystem access. Public writeups and exploits in the connected literature demonstrate a...