CVE-2025-23266

CVE-2025-23266 Auteur: Mark Mallia Plateforme cible: Ubuntu 22.04, FastAPI v2.4.3 → corrigé vers v2.5.1 le 2025-10-02 1 – En résumé : en quoi consiste cette attaque La routine parserequest de FastAPI copie les en-têtes de requête HTTP dans un petit tampon situé sur la pile de l’appelant. Si un...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – 全武器化的NVIDIA容器工具包漏洞利用 参考 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC Начнём с выбора базового образа. Расположение библиотек в системе зависит от того, какой это будет образ. Например, для alpine это будет /usr/lib64/, для ubuntu — /usr/lib/x8664-linux-gnu. В качестве базового образа мы будем использовать ubuntu. root@kitploit: FROM...

poc-cve-2024-0132

poc-cve-2024-0132 بيئة إعادة الإنتاج: نظام التشغيل: ubuntu 22.04 مع برنامج تشغيل nvidia docker: v27.1.0 nvidia-container-toolkit: v1.16.1 خطوات إعادة الإنتاج: تشغيل صورة حاوية poc الهدف: الوصول إلى ملفات المضيف داخل الحاوية استدعاء واجهات برمجة تطبيقات docker daemon عبر docker.sock في الحاوية إعا...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, falco-no-driver, grafana-alloy, node-feature-discovery, podman, kubernetes, buildah, k3s, nvidia-container-toolkit...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, falco-no-driver, grafana-alloy, node-feature-discovery, podman, kubernetes, buildah, k3s, nvidia-container-toolkit...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, sriov-network-device-plugin, node-feature-discovery, cadvisor, podman, buildah, nvidia-container-toolkit...

CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1

Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1

Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...

NVIDIA Container Toolkit < 1.19.1 TOCTOU Race Condition (June 2026)

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.19.1. It is, therefore, affected by a vulnerability as referenced in the June 2026 advisory. - NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use...

CVE-2026-24260

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering...

CLEANSTART-2026-SF49994 Security fixes for CVE-2025-0913, CVE-2025-22866, CVE-2025-22870, CVE-2025-22871, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.18.2-r0, 1.18.2-r1, 1.19.0-r0

Multiple security vulnerabilities affect the nvidia-container-toolkit package. These issues are resolved in later releases. See references for individual vulnerability details...