Podroid

Podroid Ejecuta contenedores Linux y un escritorio Linux completo en tu teléfono Android. Sin root. Una VM real de Alpine Linux con su propio kernel, no un truco de chroot o proot, por lo que Podman, Docker y LXC se comportan exactamente igual que en un servidor. Sitio web · Documentación ·...

secfixes-tracker

Alpine Security Fix Tracker This is a Flask web application which tracks security fixes in Alpine. By using the Alpine secdb, we can generally deduce which CVEs have and have not been fixed. Some extensions to the secfixes reporting schema will be added to allow package maintainers to denote fals...

melange

melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...

WSL_Payload_Builder

WSL Payload Builder Disclaimer This tool is intended for legitimate security research and penetration testing. Users are responsible for ensuring they have proper authorization before testing systems they do not own or have explicit permission to test. Overview A shell script for creating minimal...

copyfail-alpine

Esta es una versión más minimalista de Copy Fail LPE CVE-2026-31431 que parchea los primeros bytes de /etc/passwd para que hacer su a root no requiera contraseña. Esto reduce el tamaño total del exploit original y lo hace más portátil. Distribuciones como Alpine utilizan busybox/musl en lugar de ...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder basado en Alpine Este proyecto te permite construir un payload shell.so usando Alpine Linux dentro de un contenedor Docker. Instrucciones 1. Clonar el repositorio : git clone cd 2. Construir el payload : ./runbuild.sh El shell.so compilado se generará en el directorio raíz del...

ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root

Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-38470 CVE-2023-38470 in avahi - Patched by Root

Root has patched CVE-2023-38470 in the avahi package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root

Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-67215 CVE-2026-67215 in cjson - Patched by Root

Root has patched CVE-2026-67215 in the cjson package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-5121 CVE-2026-5121 in libarchive - Patched by Root

Root has patched CVE-2026-5121 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...

CVE-2026-91768: Incomplete Comparison with Missing Factors

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

CVE-2026-91766: Exposure of Sensitive Information to an Unauthorized Actor

When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP. A server that can steer a redirect therefore...

CVE-2026-91765: Uncontrolled Recursion

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

CVE-2026-91769: Improper Validation of Certificate with Host Mismatch

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

CVE-2026-93682: Out-of-bounds Read

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...

CVE-2026-91767: Heap-based Buffer Overflow

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

CVE-2026-6103: Integer Overflow or Wraparound

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

CVE-2026-92842: Heap-based Buffer Overflow

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...