cve-2018-9208

CVE-2018-9208 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-9208 Autor de la imagen: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

clair

Clair Nota : La rama main puede estar en un estado inestable o incluso roto durante el desarrollo. Por favor, usa releases en lugar de la rama main para obtener binarios estables. Clair es un proyecto de código abierto para el análisis estático de vulnerabilidades en contenedores de aplicaciones...

fuzzer-testing

fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...

RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass

Kimai Docker images = 2.58.0 which generates a random APPSECRET on first boot. Alternatively, manually set a unique APPSECRET in your .env.local file. reference: - https://github.com/advisories/GHSA-jr9p-4h4j-6c58 - https://github.com/kimai/kimai/releases/tag/2.58.0 classification: cve-id:...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner Este escáner recorrerá recursivamente rutas, incluyendo archivos comprimidos, en busca de versiones vulnerables de log4j y archivos org/apache/logging/log4j/core/lookup/JndiLookup.class. Actualmente la lista de permitidos define versiones no explotables, en este cas...

ingress-nginx-0.21-1.19.5

COMPILACIÖN: cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...

CVE-2021-41773S

Imágenes vulnerables de Docker para la vulnerabilidad de Apache de path traversal CVE-2021-41773 Esta vulnerabilidad solo aplica a la versión 2.4.49 que tiene configuraciones no predeterminadas específicas. En ciertas situaciones, esto puede resultar en lectura de archivos o ejecución de código...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents Description Download & Run Linux & Mac Windows Powershell Usage Instructions Take the challenge Troubleshooting Solutions Contributing...

dive

dive Una herramienta para explorar una imagen Docker, el contenido de sus capas y descubrir formas de reducir el tamaño de tu imagen Docker/OCI. Para analizar una imagen Docker simplemente ejecuta dive con una etiqueta/id/digest de imagen: dive O puedes usar dive directamente con Docker: alias...

cve-images

cve-images — imágenes de laboratorio intencionalmente vulnerables Una colección de imágenes Docker deliberadamente vulnerables para el estudio de seguridad en un laboratorio aislado. Comenzó como reproducciones de CVE de nginx y está creciendo hasta convertirse en un conjunto más amplio de imágen...

VulApps

VulApps http://vulapps.evalbug.com/ Recopila diversos entornos de vulnerabilidades y, para mayor comodidad, se adoptan de manera uniforme en formato Dockerfile. También se recopilan entornos de herramientas de seguridad. Si te gusta, por favor dale a Star; si no piensas contribuir, no hagas Fork...

xpdf-docker

Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...

pulsar-docker-images-patch-CVE-2021-44228

Parchear imágenes de pulsar con la actualización de Apache Log4J 2.17.1 Cubre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Consulte Vulnerabilidades de seguridad y actualizaciones de Log4J para obtener más información. consulte el Dockerfile para la solución Construcción y envío ...

EUVD-2026-62468

Renovate versions from 42.68.1 before 42.96.3 and from 42.68.1 before 43.4.4, including corresponding Docker images renovate/renovate, mend/renovate-ce, renovate-ee-server, renovate-ee-worker =13.3.0 13.6.0, fail to restrict environment variables to an allowlist when spawning child processes. As ...

CVE-2026-76227 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure

Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images renovate-ce, renovate-ee-server, renovate-ee-worker from 13.3.0 before 13.6.0, fail to restrict environment variables to an allowlist when...

CVE-2026-76227

Renovate versions 42.68.1 through 42.96.2 (and 42.68.1 through 43.4.3), along with corresponding Docker images, fail to restrict environment variables to an allowlist when spawning child processes. The root cause was an inadvertent removal of the filtering logic during a migration to the execa li...