vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

secfixes-tracker

Alpine Security Fix Tracker Este é um aplicativo web Flask que rastreia correções de segurança no Alpine. Ao usar o secdb do Alpine, podemos geralmente deduzir quais CVEs foram e não foram corrigidas. Algumas extensões ao esquema de relatórios do secfixes serão adicionadas para permitir que os...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile Este fornece uma imagem Dockerfile de PoC para o CVE-2025-48384, relacionado a https://github.com/vinieger/CVE-2025-48384, para que possa ser testado dentro de um cluster Kubernetes. Implantando no GKE: Construindo e Publicando no registro do GCP: altere your...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-basiert Dieses Projekt ermöglicht es dir, ein shell.so-Payload mit Alpine Linux in einem Docker-Container zu erstellen. Anleitung 1. Repository klonen : git clone cd 2. Payload erstellen : ./runbuild.sh Die kompilierte shell.so wird im Projektwurzelverzeichnis erzeugt. ⚠️...

Podroid

Podroid Esegui container Linux e un desktop Linux completo sul tuo telefono Android. Senza root. Una vera VM Alpine Linux con il proprio kernel - non un trucco da chroot o proot - così Podman, Docker e LXC si comportano esattamente come su un server. Sito web · Documentazione · Scarica APK Cosa...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do?...

ROOT-OS-ALPINE-320-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root

Root has patched CVE-2026-11856 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root

Root has patched CVE-2026-8927 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-9079 CVE-2026-9079 in curl - Patched by Root

Root has patched CVE-2026-9079 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

copyfail-alpine

Questa è una versione più minimale del port di Copy Fail LPE CVE-2026-31431 che modifica i primi byte di /etc/passwd in modo che su-ing verso root non richieda password. Questo riduce la dimensione totale dell'exploit originale e lo rende più portabile. Distribuzioni come Alpine usano busybox/mus...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

melange

melange Crea pacchetti apk utilizzando pipeline dichiarative. Comunemente usato per fornire pacchetti personalizzati per immagini container costruite con apko. La maggior parte degli apk è costruita per l'uso con gli ecosistemi Wolfi o Alpine Linux. Caratteristiche principali: Build orientate all...

WSL_Payload_Builder

WSL Payload Builder Disclaimer Questo strumento è destinato a ricerche di sicurezza legittime e test di penetrazione. Gli utenti sono responsabili di garantire di avere la dovuta autorizzazione prima di testare sistemi che non possiedono o per cui non hanno un permesso esplicito. Panoramica Uno...

CVE-2026-48702 Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the Package.Unmarshal function in pkg/types/alpine/apk.go decompresses the signature and control gzip members of an APK file into in-memory buffers without bounding the total decompressed size...

CVE-2026-48702

CVE-2026-48702 : Rekor before 1.5.2 decompresses APK signatures in Alpine APK parsing without bounding the total decompressed size, enabling a decompression bomb via gzip with extreme ratios. Attackers can trigger unbounded heap allocation during requests to unauthenticated endpoints POST /api/v1...

CVE-2026-48702 Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the Package.Unmarshal function in pkg/types/alpine/apk.go decompresses the signature and control gzip members of an APK file into in-memory buffers without bounding the total decompressed size...