CVE-2024-21626

이용: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up 검증: 호스트의 /etc/passwd를 획득할 수 있다면 해당 취약점이 존재합니다. 환경: runc: =v1.0.0-rc93,=1.1.11 공격 세부 원리: runc 영향 버전에서는 초기화 과정에서 호스트의 /sys/fs/cgroup 핸들을 포함한 일부 내부 파일 디스크립터가 유출되며, runc는 최종 작업 디렉토리가 컨테이너의 마운트 네임스페이스 내에 있는지 검증하지 않습니다. 공격...

CVE-2024-21626

CVE-2024-21626 الاستغلال دليل العمل docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm المهم وضع -w /proc/self/fd/8\ الوصول إلى نظام ملفات المضيف باستخدام cat ../../../../../../../../../etc/passwd داخل الحاوية الاستغلال الرابط الرمزي 1. docker run --name cve-2024-21626...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe Container Ausbruch PoC Dieses Repository enthält einen PoC für die dirtypipe Kernel-Schwachstelle, um aus einem Container auszubrechen. Weitere Erklärungen finden Sie in diesem Blogbeitrag...

security-labs-pocs

أبحاث وأكواد إثبات المفهوم من Datadog Security Labs يحتوي هذا المستودع على معلومات وأكواد استغلال وعينات برمجيات ضارة وسكربتات من Datadog Security Labs. الهدف يهدف هذا المستودع إلى توفير أكواد استغلال لإثبات المفهوم وعينات برمجيات ضارة وعروضًا تقنية لمساعدة المجتمع على الاستجابة للتهديدات. قد...

botb

Ausbruch aus der Box BOtB BOtB ist ein Tool zur Container-Analyse und -Ausnutzung, das für Pentester und Ingenieure entwickelt wurde und gleichzeitig CI/CD-freundlich mit gängigen CI/CD-Technologien ist. Was macht es? BOtB ist ein CLI-Tool, mit dem Sie: Häufige Container-Sicherheitslücken ausnutz...

CVE-2019-14271_Exploit

CVE-2019-14271Exploit Ein praktisches und zeitsparendes automatisches Skript zum Erstellen der Umgebung und zum Ausführen des Exploits. Referenzen https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...

ehir-vuln-enterprise-login

Configurazione locale del portale aziendale Enterprise Questo progetto contiene una configurazione containerizzata locale con un portale frontend e un gateway backend integrato. Struttura del Workspace client/: Contiene i file statici del frontend index.html basati su Bootstrap 5 e il gestore del...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities that could enable unauthorized lateral movement , container breakout , and sensitive data exposure within internal communications. The CVSS 3.1 base score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

EUVD-2026-65469

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

Docker-Escape-Miner

Utilizzare un exploit Docker pubblicato per ottenere accesso root ed eseguire uno script di mining bitcoin Questo utilizza due librerie open source: nightminer di @ricmoo per il mining bitcoin in python RunC-CVE-2019-5736 di @twistlock per l'escape da Docker Requisiti di sistema È stato testato s...

CVE-2025-9074-PoC

Docker API – Nicht authentifizierte RCE CVE-2025-9074 Eine kritische Sicherheitslücke CVE-2025-9074 in Docker Desktop ermöglicht lokal laufenden Linux-Containern, eine Verbindung zur Docker Engine API über das Standard-Subnetz 192.168.65.7:2375 herzustellen. Das Problem besteht unabhängig von...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825 HCL Hive is affected by incorrect default permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions that can be exploited over the network without prior authentication (CVSS 7.5, HIGH). The vulnerability enables unauthorized lateral movement , container breakout , and interception of sensitive internal communications , with the primary impac...

PT-2026-80900

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3. A patched version of the package is available...