CVE-2019-16097-batch

CVE-2019-16097-batch 免責事項 セキュリティ研究のみに使用し、違法なテストは行わないでください。結果は自己責任となります！！！ CVE-2019-16097-batch バッチ式脆弱性悪用スクリプト url.txtファイルに対象アドレスを一括で追加してください http://1.1.1.1 http://2.2.2.2 pythonでこのスクリプトを実行すると、result.txtで最終的な検証結果を確認できます 脆弱性の背景...

klar

Klar Clair와 Docker Registry 통합 Clair API v1 및 v3 모두 지원 Klar는 Clairhttps://github.com/coreos/clair를 사용하여 개인 또는 공용 Docker 레지스트리에 저장된 이미지의 보안 취약점을 분석하는 간단한 도구입니다. Klar는 통합 도구로 설계되었으므로 환경 변수에 의존합니다. 종속성이 필요 없는 단일 바이너리입니다. Klar는 Docker 레지스트리와 Clair 간의 이미지 검사를 조정하는 클라이언트 역할을 합니다. 바이너리 설치 가장 간단한 방법은...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

ictf-framework

iCTF 프레임워크 3.0 이것은 Shellphish가 iCTF를 호스팅하는 데 사용하는 프레임워크입니다. iCTF 프레임워크는 2014년 Usenix 3GSE 워크숍에서 발표된 논문에 설명되어 있습니다. 우리는 교육자와 트레이너가 자신만의 A/D CTF를 호스팅할 수 있기를 바라며 이 프레임워크를 공개했습니다. 이 프레임워크는 상업적 사용이 무료이지만, 우리가 제공할 수 있는 지원은 제한적입니다. 향후 각 구성 요소에 대한 더 많은 기술 문서를 공개할 계획입니다; 현재로서는 게임을 만드는 방법에 대한 지침을 여기에서 찾을 수...

jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17

Docker Commons API Plugin for Jenkins さまざまな Docker 関連プラグインに共通の共有機能を提供する API プラグインです。 概要 Docker イメージとコンテナのフィンガープリントを管理するための API Docker レジストリの認証情報と場所 Docker デーモン（別名 Docker Remote API）の認証情報と場所 Docker CLI クライアント向けの ToolInstallation ジョブから Docker イメージの関連を取得する DockerImageExtractor 拡張ポイント Docker...

CVE-2019-16097

CVE-2019-16097-batch 免責事項 セキュリティ研究のみに使用し、不正なテストは行わないでください。結果は自己責任となります！！！ CVE-2019-16097-batch バッチ脆弱性悪用スクリプト url.txtファイルにターゲットアドレスを一括追加します http://1.1.1.1 http://2.2.2.2 Pythonでこのスクリプトを実行すると、result.txtに最終的な検証結果が表示されます 脆弱性の背景...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Docker Registry V2 Schema 1 イメージポイズニング プログラムコード Python Flask + Shell root@kitploit: dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc', 'sha256:def',...

go-pillage-registries

go-pillage-registries このプロジェクトはDockerレジストリを取得し、そのカタログ内の各イメージのマニフェストと設定を収奪します。 これはGoogleのcraneコマンドのパッケージを使用しており、Dockerのkeychainセマンティクスに従うはずです。 これを上書きしたい場合は、https://github.com/google/go-containerregistry/tree/master/pkg/authn/k8schain に記載されているように authn.DefaultKeychain を変更するだけです。 インストール:...

Astra Linux – Vulnerability in Docker-Registry

A flaw was discovered in the /v2/catalog endpoint located in the distribution/distribution directory. This endpoint accepts a parameter that controls the maximum number of records to be returned query string: n. This vulnerability allows a malicious user to submit an excessively large value for n...

CVE-2026-49349 regclient may leak authentication credentials to external blob stores

regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...

PYSEC-2026-2391 BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

The dockerpull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry could modify this header to redirect the authentication reques...

BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

The dockerpull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry could modify this header to redirect the authentication reques...

PT-2026-39313

🔴 Docker Registry Auth Substring Match Forwards Credentials to a Different Registry CVE-2025-27119, High https://t.co/gO08whMpWZ...

Exploit for CVE-2026-7482

CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC Thi...

org.keycloak/keycloak-services: Keycloak: Missing Check on Disabled Client for Docker Registry Protocol

A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously...

GHSA-FJF4-6F34-W64Q Keycloak: Missing Check on Disabled Client for Docker Registry Protocol

A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously...

CVE-2026-2733 Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol

A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously...

CVE-2026-2733 Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol

A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously...

malcontent OCI image pull credential exfiltration via malicious registry token realm

Malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference. Malcontent uses google/go-containerregistry for OCI image pulls, which by default uses the Docker credential keychain. A malicious registry could return a WWW-Authenticate header...