441 matches found
CTF-hw0-BufferOverflow
!Review Assignment Due Datehttps://classroom.github.com/asse...
globalping-probe v0.52.0
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community โ wi...
softsensor-docker-prototype
Corelight Software Sensor Docker Bundle เคชเฅเคฐเคฒเฅเคเคจ Overview เคเคธเคฎเฅเค เคเฅเคฏเคพ เคถเคพเคฎเคฟเคฒ เคนเฅ Corelight Software Sensor Zeek Package Manager Corelight-update เคตเฅเคเคฒเฅเคชเคฟเค เคฐเฅเคช เคธเฅ Installing Docker Debian เคฏเคพ RHEL-เคเคงเคพเคฐเคฟเคค เคธเคฟเคธเฅเคเคฎ เคชเคฐ Docker เคธเฅเคฅเคพเคชเคฟเคค เคเคฐเคจเฅ เคเฅ เคฒเคฟเค เคเค เคธเฅเคเฅเคฐเคฟเคชเฅเค เคฆเฅเคธเคฐเฅ Corelight เคฐเคฟเคชเฅเคเคฟเคเคฐเฅ เคฎเฅเค เคถเคพเคฎเคฟเคฒ เคนเฅเฅค เคธเฅเคเฅเคฐเคฟเคชเฅเค ...
CVE-2026-55581 mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowedexecutables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell...
windows v6.05
Windows Windows inside a Docker container. Features โจ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM acceleration Customizable CPU, memory, and storage allocation Dynamic memory...
Exploit for CVE-2026-58455
CVE-2026-58455 โ Dockwatch Unauthenticated RCE auth bypass +...
CVE-2025-27771 Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
CVE-2025-27771
In UpTrain versions 0.7.1 and earlier, the /add_prompts endpoint accepts untrusted checks and metadata parameters that are deserialized and evaluated without sanitization, enabling arbitrary Python code execution. An authenticated user can achieve full host compromise (typically the Docker contai...
CVE-2025-27772: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...
CVE-2025-27771: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
PT-2026-76687
Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description An issue exists in the /new run endpoint that allows remote code execution. Authenticated users can execute arbitrary code on the host system, typically within the Docker container, by manipulating t...
CVE-2025-27770: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...
Exploit for CVE-2026-73519
CVE-2026-73519 โ WolfStack Hardcoded Cluster Secret โ Unauthen...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-72879
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.8, the getRegistryCommands function in packages/server/src/utils/cluster/upload.ts interpolates registry.password and registry.registryUrl directly into a shell command without escaping. An authenticated user with project...
PT-2026-69905
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description An issue exists in the local branch of the '/docker-container-terminal' endpoint within the docker-container-terminal.ts file. While the system uses validateRequest for authentication, it fails to...
CVE-2026-72864: Missing Authorization
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the local branch of /docker-container-terminal in apps/dokploy/server/wss/docker-container-terminal.ts authenticates with validateRequest but does not authorize the attacker-controlled containerId against the caller's...
windows v6.04
Windows Windows inside a Docker container. Features โจ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM acceleration Customizable CPU, memory, and storage allocation Dynamic memory...
globalping-probe v0.50.1
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community โ wi...