381 matches found
cve-2016-7434
CVE-2016-7434 यह Cved का हिस्सा है: कमजोर docker containers को प्रबंधित करने के लिए एक उपकरण। Cved: https://github.com/git-rep-src/cved इमेज स्रोत: https://github.com/cved-sources/cve-2016-7434 इमेज लेखक: https://github.com/opsxcq/exploit-CVE-2016-7434...
CVE-2022-27251
CVE-2022-27251 تنفيذ التعليمات البرمجية عن بُعد في LocalStack 0.12.6 بسبب عدم تعقيم مدخلات المستخدم في حقل معالج Lambda API أثناء إنشاء دوال Lambda، والطريقة غير الآمنة التي تُنشأ بها حاويات Docker، يمكن حقن أمر عبر AWS CLI في خيار --handler ليتم تنفيذه بواسطة عملية root أثناء إنشاء وتشغيل حاويات...
CVE-2026-55581 mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowedexecutables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell...
cve-2018-15877
CVE-2018-15877 Questo fa parte di Cved: uno strumento per gestire container docker vulnerabili. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15877 Image author: https://github.com/cved-sources/cve-2018-15877...
cve-2015-1427
CVE-2015-1427 Dies ist Teil von Cved: ein Werkzeug zur Verwaltung verwundbarer Docker-Container. Cved: https://github.com/git-rep-src/cved Bildquelle: https://github.com/cved-sources/cve-2015-1427 Bildautor: https://github.com/t0kx/exploit-CVE-2015-1427...
CVE-2024-24760
CVE-2024-24760 mailcow: Esposizione del contenitore Docker alla rete locale...
log4j-docker-vaccine
Log4j Docker Vaccine Un modo containerizzato per eseguire il vaccino log4j offerto da Cyberreason https://github.com/Cybereason/Logout4Shell Come farlo girare Clona questo repository: root@kitploit: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Modifica il file containers.env p...
day09-bentoml-deser-lab
Dia 09 — CVE-2025-27520 desserialização insegura estilo BentoML — Laboratório Docker Local Este laboratório reproduz a classe de desserialização insegura que levou ao CVE-2025-27520. Ele é intencionalmente vulnerável para fins educacionais. Execute apenas localmente no Docker. Início rápido...
shellshock-victim-host
shellshock-victim-host Ein Docker-Container, der anfällig für Shellshock ist - CVE-2014-6271 Ausführen root@kitploit: podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Hinweis: Funktioniert auch mit Docker. Die verwundbare Anwendung wird bereitgestellt unter:...
attack-stix-data
ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...
DC30_Workshop
DEF CON 30 Workshop Mainframe-Container Die Skripte hier werden verwendet, um den virtuellen MVS-3.8j-Großrechner für den DEFCON-30-Workshop zu erstellen. Vielen Dank, dass Sie sich den DEFCON-30-Workshop zu Mainframe-Buffer-Overflows ansehen. Docker verwenden Dieser Docker-Container enthält alle...
canarytokens-docker
Dockerisierte Canarytokens von Thinkst Applied Research Überblick Canarytokens helfen dabei, Aktivitäten und Aktionen in Ihrem Netzwerk zu verfolgen. Wenn Sie Probleme haben, schauen Sie bitte in unsere FAQ hier oder erstellen Sie ein Issue, und wir werden versuchen, uns so schnell wie möglich be...
Exploit for CVE-2026-58455
CVE-2026-58455 — Dockwatch Unauthenticated RCE auth bypass +...
CVE-2025-27771 Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
CVE-2025-27771
In UpTrain versions 0.7.1 and earlier, the /add_prompts endpoint accepts untrusted checks and metadata parameters that are deserialized and evaluated without sanitization, enabling arbitrary Python code execution. An authenticated user can achieve full host compromise (typically the Docker contai...
PT-2026-76687
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /new run endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able...
Exploit for CVE-2026-73519
CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-72879
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.8, the getRegistryCommands function in packages/server/src/utils/cluster/upload.ts interpolates registry.password and registry.registryUrl directly into a shell command without escaping. An authenticated user with project...