dockerized-android

Dockerized Android Dockerized Android ist ein containerbasiertes Framework, das es ermöglicht, einen Android-Emulator in Docker auszuführen und über einen Browser zu steuern. Dieses Projekt wurde entwickelt, um einen Ausgangspunkt für die Integration mobiler Sicherheitskomponenten in Cyber Ranges...

CVE-2021-44228_dockernize

CVE-2021-44228 Log4Shell Vulnerability Lab Environment Introduzione Questo progetto fornisce un ambiente dockerizzato per esercitarsi in sicurezza e comprendere la critica vulnerabilità Log4j nota come CVE-2021-44228 Log4Shell. Caratteristiche Principali Ambiente di test dockerizzato sicuro...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 Se questo progetto ti aiuta, considera di supportarlo con una donazione di $10 per farlo crescere. Link: https://rzp.io/rzp/zgkC6h5B Una piattaforma interattiva e auto-ospitata per l'addestramento su XSS con 33 sfide progressivamente più difficili — progettata per...

xss_vulnerability_challenges

Scenari di vulnerabilità XSS sfide Questo repository è una applicazione PHP dockerizzata contenente alcune sfide di vulnerabilità XSS. Le idee alla base delle sfide sono: Bypass della validazione Javascript Bypass delle entità HTML Bypass WAF Bypass della validazione della black-list Bypass della...

mailcow-dockerized

mailcow: dockerizzato - 🐮 + 🐋 = 💕 Vuoi supportare mailcow? Per favore, considera un contratto di supporto con Servercow per sostenere lo sviluppo futuro. Noi supportiamo te mentre tu supporti noi. : Puoi anche ottenere una SAL che è un pagamento una tantum senza obblighi o commissioni ricorrenti...

OSWE-Labs-Poc

OSWE -LABS Dockerisierte Labs für die Web-Expert-Zertifizierung OSWE. Vorbereitung auf das kommende AWAE-Training ... Ein weiteres Projekt : Malware-Analyse & Cyber-Threat-Hunting https://github.com/svdwi/BlueBox Verfügbare Labs für die OSWE 1. ATutor ist ein webbasiertes Open-Source Learning...

Mailcow < 2026-03b - Href Link Injection

mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing. id: CVE-2026-40878 info: name: Mailcow 2026-03b - Href Link Injection author: ritikchaddha severity: low description: | mailc...

CVE-2023-23488-pmpro-2.8

Dockerizzazione di una Vulnerabilità: CVE-2023-23488 Questo progetto mira a dockerizzare una vulnerabilità specifica utilizzando Docker. L'obiettivo è creare un ambiente isolato in cui la vulnerabilità possa essere sfruttata e testata in modo sicuro. Applicazione vulnerabile Paid Memberships Pro...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

redash-vulnerable

redash-vulnerable 🐛 Un'istanza Redash containerizzata vulnerabile a CVE-2021-21239 come descritto da Calif. Utilizzo 💻 Avvio del server conservando i dati root@kitploit: script/server Questo avvierà il server Redash usando Docker Compose in modalità distaccata, conservando tutti i dati esistenti...

vulnerable-web-app

vulnerable-web-app ⚠️ Intentionally vulnerable. A runna...

CVE-2026-40874

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes place when deleting Forwarding Hosts with /api/v1/delete/fwdhost. Any authenticated user can call this API. Checks are only applied for edit/add actions,...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

CVE-2026-40875

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the user dashboard's "Seen successful connections" login history renders the client IP from login logs without HTML escaping. Because the server trusts the X-Real-IP header as the source IP...

Exploit for CVE-2026-42945

NGINX CVE-2026-42945 Rift — local defensive lab Two Dockeri...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

CVE-2026-7460

CVE-2026-7460 affects mailcow-dockerized (2026-03b) and describes a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and render...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...