Lucene search
+L

22 matches found

Kitploit
Kitploit
added 2026/09/18 5:29 p.m.14 views

cyberpanel

🛠️ CyberPanel OpenLiteSpeed を搭載し、ホスティング管理を簡素化するように設計された Web ホスティングコントロールパネルです。 🔧 特徴とサービス 🔐 異なるユーザーアクセスレベル (ACL による)。 🌌 安全な Web サイトのための Auto SSL 。 💻 ファイル転送のための FTP サーバー 。 🕒 軽量 DNS サーバー (PowerDNS)。 🔐 データベース(MariaDB)を管理するための phpMyAdmin 。 📧 メールサポート (SnappyMail)。 🕌 素早いファイルアクセスを実現する ファイルマネージャー 。 🌐 PHP 管...

6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/16 3:33 a.m.14 views

POC-CVE-2026-23520

CVE-2026-23520 — Arcane 生命周期标签 RCE Arcane Docker 管理中的操作系统命令注入( 1.13.0) 概述 Arcane 是一个基于 Web 的现代 Docker 管理平台。1.13.0 之前的版本存在一个已认证的远程代码执行(RCE)漏洞,该漏洞源于更新服务生命周期标签中的操作系统命令注入。 更新服务支持两个 Docker 容器标签: 标签| 触发时机 ---|--- com.getarcaneapp.arcane.lifecycle.pre-update| 容器更新前...

9CVSS8.3AI score0.01874EPSS
SaveExploits6References3
Kitploit
Kitploit
added 2026/09/14 5:23 p.m.13 views

CVE-2026-58455-PoC

CVE-2026-58455 — Dockwatch 認証なしRCE(認証バイパス + コマンドインジェクション) CVE-2026-58455 の概念実証(PoC):セルフホスト型 Docker コンテナ管理 Web UI である Dockwatch(Notifiarr 製)における、認証なしのリモートコード実行です。0.6.567 までの全バージョンに影響します。 根本原因(ソースから検証済み) 連鎖する3つの欠陥: 1. 認証なしでセッションフラグが設定される — GET /includes/header.php はすべての訪問者に対して $SESSION'INDOCKWATCH'...

9.8CVSS8.9AI score0.0804EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2026/07/30 4:45 p.m.12 views

SUSE CVE-2026-47125

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/id/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin...

8.8CVSS7.7AI score0.00245EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/29 4:56 p.m.91 views

vulnlab-platform-lab

Local VulnLab Platform The Local VulnLab Platform is a vulner...

9.8CVSS7.5AI score0.99992EPSS
SaveExploits165
RedhatCVE
RedhatCVE
added 2026/06/02 4:03 a.m.26 views

CVE-2026-45626

Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and earlier, GET /environments/id/volumes/volumeName/browse accepts a path query parameter that is passed to a shell command sh -c "find … | while …" inside an Arcane helper container. The path sanitis...

6.3CVSS6AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/01 10:03 p.m.21 views

CVE-2026-45625

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, Arcane's huma-based REST API exposes nine endpoints under /api/customize/git-repositories and /api/git-repositories/sync for managing GitOps source repositories and their stored credentials. Eig...

9.9CVSS5.8AI score0.00387EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/29 5:10 p.m.27 views

EUVD-2026-33372

Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and earlier, GET /environments/id/volumes/volumeName/browse accepts a path query parameter that is passed to a shell command sh -c "find … | while …" inside an Arcane helper container. The path sanitis...

6.3CVSS6AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/29 5:08 p.m.39 views

EUVD-2026-33371

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, the unauthenticated GET /api/app-images/logo endpoint reflects a user-supplied color query parameter into the body of an SVG document via strings.ReplaceAll with no escaping. The substitution...

8.2CVSS5.8AI score0.00185EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.20 views

arcane 安全漏洞

Arcan is an open-source Docker management software developed by Arcane. Versions of Arcan prior to 1.19.0 contained security vulnerabilities. These vulnerabilities stemmed from multiple endpoints in the Huma-based REST API that did not call the checkAdmin helper function. Additionally, the...

9.9CVSS5.8AI score0.00387EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.38 views

Portainer 安全漏洞

Portainer is a lightweight user management interface developed by Portainer Foundation for managing Docker environments and Docker hosts. Vulnerabilities existed in versions of Portainer from 2.33.0 to 2.33.8, as well as in version 2.39.1, due to an issue with authorization verification in custom...

6.5CVSS5.8AI score0.00257EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/09 12:00 a.m.20 views

arcane 安全漏洞

Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.18.0 contained security vulnerabilities. These vulnerabilities stemmed from four GET endpoints under/api/templates, which did not have security requirements set up. This could allow any...

8.7CVSS5.8AI score0.01283EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/08 10:56 p.m.11 views

CVE-2026-42454 Termix: OS Command Injection in Docker Container Management Endpoints

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, all Docker container management endpoints in Termix interpolate the containerId URL path parameter and WebSocket message field directly into shell commands execute...

9.9CVSS6AI score0.00652EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.13 views

PT-2026-32043

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 1.17.3 Description Arcane is an interface for managing Docker containers, images, networks, and volumes. The /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET...

7.2CVSS5.8AI score0.00621EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/01/19 12:00 a.m.17 views

Arcane Access Control Vulnerability

Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.13.2 contained a access control vulnerability. This vulnerability stemmed from the environmental proxy middleware processing requests to remote environments before enforcing authentication. As a...

9.8CVSS5.8AI score0.00522EPSS
SaveExploits0References5
NVD
NVD
added 2026/01/15 8:16 p.m.14 views

CVE-2026-23520

Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to r...

9CVSS0.01874EPSS
SaveExploits6References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2022-1240

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00393EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/04/17 8:14 p.m.32 views

CVE-2025-30206

Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw allows attackers ...

9.8CVSS7.2AI score0.00886EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/15 7:14 p.m.103 views

CVE-2025-30206

Dpanel uses a hard-coded JWT secret in its default configuration, enabling attackers to forge valid tokens and bypass authentication, potentially gaining full control of the host. The GO-2025-3612 entry cites remote code execution as the outcome of this flaw in github.com/donknap/dpanel. The advi...

9.8CVSS9.7AI score0.00886EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/15 7:14 p.m.14 views

CVE-2025-30206 Dpanel's hard-coded JWT secret leads to remote code execution

Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw allows attackers ...

9.8CVSS7.5AI score0.00886EPSS
SaveExploits0References1
Rows per page
Query Builder