12174 matches found
Security update for docker-stable
This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
SUSE-SU-2026:4535-1 Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
Security update for docker-stable
This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
SUSE-SU-2026:4533-1 Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
React2Shell
React2Shell Сканер и эксплойт-набор CVE-2025-55182 для RCE в Next.js/React Server Components. Структура репозитория React2Shell/ ├── browser-extension/ Chrome-расширение для обнаружения через браузер │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/ CLI-сканер ...
CVE-2026-18963_analyst
Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...
CVE-2025-49132
CVE-2025-49132 Автономный сканер уязвимостей Реализация без Docker Этот сканер работает непосредственно на Python без зависимостей Docker, подходит для сред, где Docker недоступен или не предпочтителен. Установка pip install -r requirements-standalone.txt Ручная установка: pip install requests...
OwnCloud-CVE-2023-49103
컨테이너를 빌드하려면 다음을 수행하세요: 1: 폴더를 다운로드하고 압축을 푼 다음 컨테이너를 빌드합니다. 2: docker build -t cve-2023-49103 ./ 3: docker run --name cve-2023-49103 -p 80:80 -p 443:443 cve-2023-49103...
Docker IPsec VPN Server
English | 简体中文 | 繁體中文 | Русский IPsec VPN сервер на Docker Docker-образ для запуска сервера IPsec VPN с поддержкой IPsec/L2TP, Cisco IPsec и IKEv2. Основан на Alpine 3.23 или Debian 12 с использованием Libreswan программное обеспечение IPsec VPN и xl2tpd демон L2TP. IPsec VPN шифрует сетевой...
setup-cve-2015-8562
Joomla! RCE CVE 2015-8562 Файл Docker Compose для настройки среды для тестирования CVE 2015-8562 Содержание 1. О проекте 2. Начало работы Предварительные требования Установка 3. Использование 4. Вклад 5. Лицензия О проекте Этот проект включает файл Docker Compose для настройки среды для...
cve-2019-5736-poc
CVE-2019-5736 개념 증명 이것은 호스트 runc 바이너리에 문자열을 추가합니다. 자체 페이로드를 준비하세요 stage2.c 참조. 실행하려면: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
xz-vulnerable-honeypot
xz-vulnerable-honeypot XZ 백도어가 포함된 SSH 허니팟입니다. CVE-2024-3094 TODO : 백도어 및/또는 sshd 후킹. 복호화를 위한 RSA 키 로깅. 참고: https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504 https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01 https://github.com/hamarituc/xz-backdoor 경고 반드시 격리된 별도의 시스템에서...
Exploite-CVE-2023-30212-vulnerability
создание уязвимой Docker-среды, подверженной CVE-2023-30212 Описание Docker-среда и эксплуатация уязвимости CVE-2023-30212. CVE-2023-30212 — это уязвимость безопасности, затрагивающая версии OURPHP до 7.2.0 включительно. Эта уязвимость позволяет проводить атаки с использованием межсайтового...
LayarKacaSiber-CVE-2021-41773
CVE-2021-41773 - Apache HTTP Server 2.4.49 Как запустить лабораторию CVE-2021-41773-Path Traversal 1. Установите и запустите Docker на вашем ПК/ноутбуке 2. Клонируйте этот github репозиторий 3. Перейдите в папку Path Traversal 4. Введите следующие команды docker build -t...
Kimai-CVE-2026-52824-POC
Kimai CVE-2026-52824 — 기본 APPSECRET 인증 우회 참고: 저장소 URL에는 오래된 CVE IDCVE-2026-49865가 포함되어 있습니다. 이 저장소에서 추적하는 정확하고 최신 CVE는 CVE-2026-52824 GHSA-jr9p-4h4j-6c58입니다. Kimai 시간 추적버전 ≤ 2.57.0의 하드코딩된 기본 APPSECRET 취약점에 대한 개념 증명 익스플로잇 툴킷입니다. 패치되지 않은 Docker 배포에서 위조된 KIMAIREMEMBER 쿠키를 통한 인증 우회를 허용합니다. 배경 이야기...
Linux Distros Unpatched Vulnerability : CVE-2026-103433
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through...
@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)
@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0-beta.4, =21.4.0-beta.4, =21.4.0-beta.4, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...
@nx/express (>=23.0.0-beta.0, <=23.1.0), @nx/nest (>=23.0.0-beta.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0-rc.3)
@nx/docker NPM version =23.0.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...
@nx/docker: OS command injection in the @nx/docker release pipeline
Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...
