164 matches found
kraken
Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...
mailcow-dockerized
mailcow: dockerized - ๐ฎ + ๐ = ๐ Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...
Mailcow < 2026-03b - Href Link Injection
mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing. id: CVE-2026-40878 info: name: Mailcow 2026-03b - Href Link Injection author: ritikchaddha severity: low description: | mailc...
Mailcow Dockerized Swagger UI - Cross-Site Scripting
Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...
OSWE-Labs-Poc
OSWE -LABS Dockerized labs For Web Expert OSWE certification. Preparation for coming AWAE Training ... Another project : malware analysis & cyber threat hunting https://github.com/svdwi/BlueBox Available labs for the OSWE 1. ATutor is an Open Source Web-based Learning Content Management System...
karonte
Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...
dockerized-android
ๅฎนๅจๅ็ Android ๅฎนๅจๅ็ Android ๆฏไธไธชๅบไบๅฎนๅจ็ๆกๆถ๏ผๅ ่ฎธๅจ Docker ๅ ๆง่ก Android ๆจกๆๅจๅนถ้่ฟๆต่งๅจ่ฟ่กๆงๅถใ่ฏฅ้กน็ฎๆจๅจไธบๅฐ็งปๅจๅฎๅ จ็ปไปถ้ๆๅฐ็ฝ็ป้ถๅบๆไพ่ตท็น๏ผไฝๅฎๅฏไปฅ็จไบไปปไฝ็ฎ็ใไธ่ฟ๏ผๅฏนไบๅผๅๅๆต่ฏ็ฎ็๏ผๆจ่ไฝฟ็จ docker-android ้กน็ฎใ ็ฎๅฝ ็ฎๅฝ ไป็ป ็นๆง ๆถๆ ๆ ธๅฟ็ปไปถ UI ็ปไปถ ๅฎไพ็ฎก็ๅจ็ปไปถ Docker ้ๅๅ่กจ ๅฆไฝ่ฟ่ก ๅ ๅณๆกไปถ ๆไฝ็ณป็ปๅ ผๅฎนๆง OS X ้ๅฏน็ๅฎ่ฎพๅค็ๅ้ๆนๆณ ่ฟ่ก ๆๅปบ ้ ็ฝฎ ่ฎธๅฏๅ่ฎฎ ่ฐๅจ่ฐ่ฎบๅฎนๅจๅ็ Android ่ด่ฐข ไป็ป...
CVE-2023-23488-pmpro-2.8
Dockerizing a Vulnerability: CVE-2023-23488 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Paid Memberships Pro v2.9.8 WordPress Plugin -...
manuka
Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...
xss_vulnerability_challenges
XSS ๆผๆดๅบๆฏ๏ผๆๆ๏ผ ๆฌไปๅบๆฏไธไธช Docker ๅ็ PHP ๅบ็จ็จๅบ๏ผๅ ๅซไบไธไบ XSS ๆผๆดๆๆใ ๆๆ่ๅ็ๆ่ทฏๅ ๆฌ๏ผ JavaScript ้ช่ฏ็ป่ฟ HTML ๅฎไฝ็ป่ฟ WAF ็ป่ฟ ้ปๅๅ้ช่ฏ็ป่ฟ ๅบ็ก XSS ้ช่ฏ็ป่ฟ ๅฉ็จๅๅฑ็ผ็ ็ป่ฟ WAF ไปฅๅฉ็จ XSS ้่ฟ็ป่ฟ่ฝฌไนๅญ็ฌฆๅฉ็จ XSS ไฝฟ็จ Docker ๅฟซ้ๅผๅง ไฝฟ็จ Docker Hub๏ผๆๅฟซ๏ผ๏ผ 1. ่ฆ่ฎฟ้ฎ่ฟไบๆๆ๏ผไฝ ้่ฆๅฎ่ฃ Dockerใ 2. ่ฟ่กไปฅไธๅฝไปคไป Docker Hub ๆๅๅนถ่ฟ่ก้ๅ๏ผ sudo docker run -d -p 9003:80...
redash-vulnerable
redash-vulnerable ๐ A Dockerized Redash instance that is vulnerable to CVE-2021-21239 as written about by Calif. Usage ๐ป Starting the server preserving data script/server This will start the Redash server using Docker Compose in detached mode, preserving any existing data. The server will be...
CVE-2025-25198
CVE-2024-25198 mailcow: dockerized es una suite de correo/grupo de trabajo de cรณdigo abierto basada en docker. Antes de la versiรณn 2025-01a, una vulnerabilidad en la funcionalidad de restablecimiento de contraseรฑa de mailcow permite a un atacante manipular el encabezado Host HTTP para generar un...
CVE-2021-4034
CVE-2021-4034 El exploit de escalada de privilegios de Polkit. Dockerizado para garantizar la reproducibilidad. Ejecutar docker docker build -t cve20214034 . docker run -it --rm cve20214034 Ejecutar el exploit whoami usuario ./gain-root.sh whoami root Referencias El aviso original:...
CVE-2021-44228_dockernize
CVE-2021-44228 Log4Shell Vulnerability Lab Environment Introduction This project provides a dockerized environment for safely practicing and understanding the critical Log4j vulnerability known as CVE-2021-44228 Log4Shell. Key Features Secure dockerized testing environment Custom payload testing...
TCL-xss-Labs
XSS Lab โ The Cyber Ledger ๐ธ If this project helps you, consider supporting it with a $10 donation to keep it growing. Link: https://rzp.io/rzp/zgkC6h5B An interactive, self-hosted XSS training platform with 33 progressively harder challenges โ designed for hackers, pentesters, and developers who...
mailcow-dockerized v2026-09
mailcow: dockerized - ๐ฎ + ๐ = ๐ Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...
vulnerable-web-app
vulnerable-web-app โ ๏ธ Intentionally vulnerable. A runna...
CVE-2026-40874
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes place when deleting Forwarding Hosts with /api/v1/delete/fwdhost. Any authenticated user can call this API. Checks are only applied for edit/add actions,...
CVE-2026-7460
mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...
CVE-2026-40875
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the user dashboard's "Seen successful connections" login history renders the client IP from login logs without HTML escaping. Because the server trusts the X-Real-IP header as the source IP...