20 matches found
CVE-2023-1206-CVE-2025-40040-CVE-2024-49882
Объединенный скрытый канал: CVE-2023-1206 + CVE-2024-49882 Обзор Этот проект демонстрирует скрытый канал связи с использованием двух уязвимостей ядра Linux: Компонент| CVE| Назначение ---|---|--- Канал синхронизации| CVE-2023-1206| Синхронизация времени через измерение коллизий хеша IPv6 Канал...
CVE-2023-22077
CVE-2023-22077 CVE Доказательство концепции: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...
page_inject
pageinject — межконтейнерный эскейп через AFALG aead Межконтейнерный эксплойт уязвимости AFALG aead — переход из одного скомпрометированного контейнера во все соседние контейнеры, использующие тот же слой образаlibc.so.6. Это примитив эскейпа : он запускается изнутри непривилегированного...
LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-
LInux-Kernel-InfoLeak-6.12: использование для межконтейнерной утечки информации POC показывает, как утекают данные PostgreSQL из-за подсистемы hugefile. На основе https://x.com/spendergrsec/status/1993794163880718700?s=20...
CVE-2020-8559
Preuve de concept PoC de l'exploit Kubernetes CVE-2020-8559 Ceci est uniquement à des fins de démonstration. À utiliser uniquement sur des systèmes sur lesquels vous êtes autorisé à effectuer des actions administratives et à exploiter la CVE-2020-8559. Ceci est un PoC pour la CVE-2020-8559. Cette...
Debian dla-4801 : python3-swift - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4801 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4801-1 [email protected]...
PYSEC-2026-3607 proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component- Package: proot-distro- Affected command: restore- Attack surface: Host-side Termux CLI processing a user-supplied backup archive- Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write--- Affected Versions| Component | Version ||---|---|| proot-distro ...
CVE-2026-54727
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
CVE-2026-54727: Exposure of Resource to Wrong Sphere
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
PYSEC-2026-934 OpenStack Object Storage (Swift) Sensitive Data Exposure
OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...
CVE-2026-42088
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script-runner-api container. Because all the...
PT-2026-36882
Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS versions prior to 7.0.0-rc3 Description The Script Runner widget allows users to execute Python and Ruby scripts directly from the 'openc3-COSMOS-script-runner-api' container. Since all Docker containers share a network, users ca...
PT-2026-26419
Summary In [email protected], sandbox network hardening blocks network=host but still allows network=container:. This can let a sandbox join another container's network namespace and reach services available in that namespace. Preconditions and Trust Model Context This issue requires a...
UBUNTU-CVE-2025-54410
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...
eBPF-Attack
eBPF-Attack This is the PoC for our paper: Cross Container A...
USN-4881-1 containerd vulnerability
It was discovered that containerd incorrectly handled certain environment variables. Contrary to expectations, a container could receive environment variables defined for a different container, possibly containing sensitive information...