143 matches found
klar
Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...
github-dorks
Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...
CVE-2019-16097-batch
CVE-2019-16097-batch Descargo de responsabilidad Solo para uso en investigación de seguridad. No realizar pruebas ilegales, ¡¡¡asumir las consecuencias!!! CVE-2019-16097-batch Script de explotación de vulnerabilidades en lote Agregar direcciones objetivo en lote en el archivo url.txt http://1.1.1...
CVE-2019-16097
CVE-2019-16097-batch Descargo de responsabilidad Solo para uso en investigación de seguridad. No lo utilice para pruebas ilegales. ¡¡¡Las consecuencias son bajo su propia responsabilidad!!! CVE-2019-16097-batch Script de explotación de vulnerabilidad en lote Agregue direcciones objetivo en lote e...
ictf-framework
El Framework iCTF 3.0 Este es el framework que Shellphish utiliza para alojar el iCTF. El Framework iCTF está descrito en un artículo presentado en el taller Usenix 3GSE en 2014. Publicamos esto con la esperanza de que permita a educadores y entrenadores alojar sus propios CTF A/D. Este framework...
jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17
Plugin de API Commons de Docker para Jenkins Plugin de API que proporciona la funcionalidad común compartida para varios plugins relacionados con Docker. Resumen API para gestionar huellas digitales de imágenes y contenedores Docker Credenciales y ubicación del Registro Docker Credenciales y...
klar
Klar Clair와 Docker Registry 통합 Clair API v1 및 v3 모두 지원 Klar는 Clairhttps://github.com/coreos/clair를 사용하여 개인 또는 공용 Docker 레지스트리에 저장된 이미지의 보안 취약점을 분석하는 간단한 도구입니다. Klar는 통합 도구로 설계되었으므로 환경 변수에 의존합니다. 종속성이 필요 없는 단일 바이너리입니다. Klar는 Docker 레지스트리와 Clair 간의 이미지 검사를 조정하는 클라이언트 역할을 합니다. 바이너리 설치 가장 간단한 방법은...
[SECURITY] Fedora 43 Update: docker-distribution-3.1.2-1.fc43
The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...
[SECURITY] Fedora 44 Update: docker-distribution-3.1.2-1.fc44
The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...
[SECURITY] Fedora 45 Update: docker-distribution-3.1.2-1.fc45
The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...
CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning
CVE-2026-21005 – Docker Registry V2 Schema 1 Image Poisoning Program Code Python Flask + Shell dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc', 'sha256:def', 'config': ...
go-pillage-registries
go-pillage-registries Este proyecto toma un registro Docker y saquea el manifiesto y la configuración de cada imagen en su catálogo. Utiliza el paquete del comando crane de Google, que debería seguir la semántica de keychain de Docker. Si desea anular esto, simplemente cambie authn.DefaultKeychai...
Astra Linux – Vulnerability in Docker-Registry
A flaw was discovered in the /v2/catalog endpoint located in the distribution/distribution directory. This endpoint accepts a parameter that controls the maximum number of records to be returned query string: n. This vulnerability allows a malicious user to submit an excessively large value for n...
Open Redirect
Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Open Redirect in the Docker registry pagination handling, which follows the URL given in an HTTP Link header while still attaching the registry credentials, without confining the follow to the original...
JetBrains TeamCity < 2021.1 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2021.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible. CVE-2021-43196 - In JetBrains TeamCity...
CVE-2026-49349 regclient may leak authentication credentials to external blob stores
regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...
CVE-2026-49349 regclient may leak authentication credentials to external blob stores
regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...
PYSEC-2026-2391 BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing
The dockerpull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry could modify this header to redirect the authentication reques...
BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing
The dockerpull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry could modify this header to redirect the authentication reques...
