secfixes-tracker

Rastreador de correcciones de seguridad de Alpine Esta es una aplicación web Flask que rastrea las correcciones de seguridad en Alpine. Al usar la secdb de Alpine, generalmente podemos deducir qué CVEs han sido corregidos y cuáles no. Se añadirán algunas extensiones al esquema de reporte de...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile 이것은 CVE-2025-48384를 위한 PoC 도커파일 이미지를 제공하며, https://github.com/vinieger/CVE-2025-48384와 관련되어 있어 Kubernetes 클러스터 내에서 테스트할 수 있습니다. GKE에 배포하기: GCP 레지스트리에 빌드 및 게시: your registry path를 변경하세요 root@kitploit: IMAGE="/alpine-cve-2025-48384:latest" Build and push docker...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-basiert Dieses Projekt ermöglicht es dir, ein shell.so-Payload mit Alpine Linux in einem Docker-Container zu erstellen. Anleitung 1. Repository klonen : git clone cd 2. Payload erstellen : ./runbuild.sh Die kompilierte shell.so wird im Projektwurzelverzeichnis erzeugt. ⚠️...

Podroid

Podroid Esegui container Linux e un desktop Linux completo sul tuo telefono Android. Senza root. Una vera VM Alpine Linux con il proprio kernel - non un trucco da chroot o proot - così Podman, Docker e LXC si comportano esattamente come su un server. Sito web · Documentazione · Scarica APK Cosa...

copyfail-alpine

Questa è una versione più minimale del port di Copy Fail LPE CVE-2026-31431 che modifica i primi byte di /etc/passwd in modo che su-ing verso root non richieda password. Questo riduce la dimensione totale dell'exploit originale e lo rende più portabile. Distribuzioni come Alpine usano busybox/mus...

melange

melange Crea pacchetti apk utilizzando pipeline dichiarative. Comunemente usato per fornire pacchetti personalizzati per immagini container costruite con apko. La maggior parte degli apk è costruita per l'uso con gli ecosistemi Wolfi o Alpine Linux. Caratteristiche principali: Build orientate all...

WSL_Payload_Builder

WSL Payload Builder Disclaimer Questo strumento è destinato a ricerche di sicurezza legittime e test di penetrazione. Gli utenti sono responsabili di garantire di avere la dovuta autorizzazione prima di testare sistemi che non possiedono o per cui non hanno un permesso esplicito. Panoramica Uno...

CLEANSTART-2026-IL84688 Security fixes in cert-manager-webhook-pdns-fips 2.5.5-r1

Package cert-manager-webhook-pdns-fips version 2.5.5-r1 fixes 29 vulnerabilities: CVE-2026-39822, CVE-2026-42505, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

CLEANSTART-2026-SG48140 Security fixes in melange 0.56.1-r1

Package melange version 0.56.1-r1 fixes 22 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-54174, CVE-2026-39830, CVE-2026-39831...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

ROOT-OS-ALPINE-323-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root

Root has patched CVE-2026-11856 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root

Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-11824 CVE-2026-11824 in sqlite - Patched by Root

Root has patched CVE-2026-11824 in the sqlite package for Root:Alpine:3.23. Multiple fixed versions available...

ALPINE-CVE-2026-62433

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

ALPINE-CVE-2026-62431

The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a DE fault...

ALPINE-CVE-2026-62434

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...

ALPINE-CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

ALPINE-CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

ALPINE-CVE-2026-42493

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives HVM/PVH: HAP, PV: shim are commonly available, the decision was to deprecate the functionality, while still retainin...

ALPINE-CVE-2026-0864

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value...