2915 matches found
container-cve-2021-22555
CVE-2021-22555 재현기를 컨테이너로 먼저, 이 저장소는 편리한 사전 빌드 컨테이너로 여기에서 익스플로잇 코드를 가져옵니다: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 사전 빌드 컨테이너: quay.io/cgwalters/cve-2021-22555 완화: seccomp 프로필 강력한 완화 방법은 cloneCLONENEWUSER을 거부하는 seccomp를 활성화하는 것입니다. 상위 Kubernetes 문서에는 이에 대...
proxmox-lxc-docker-fix
Proxmox LXC AppArmor Fix for Docker/Containers Обходной путь для CVE-2025-52881 : Исправляет поломку Docker, Podman и других контейнерных рантаймов в LXC-контейнерах Proxmox, вызванную несовместимостью AppArmor с runc 1.2.7+/1.3.2+ 🚨 Проблема Недавние обновления безопасности runc версии 1.2.7+ и...
dive
dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...
foxcage
foxcage Запускайте Firefox в rootless-контейнере Podman для изоляции безопасности. Ваш браузер работает практически без Linux-возможностей capabilities, в собственном пользовательском и сетевом пространстве имён, изолированном от хоста — при этом сохраняя полное аппаратное ускорение GPU, звук и...
pumba
Docker, containerd 및 Podman을 위한 카오스 테스팅 도구 빠른 시작 · 사용자 가이드 · 네트워크 카오스 · 배포 · 기여 Pumba는 Docker, containerd 및 Podman 컨테이너를 위한 카오스 테스팅 및 네트워크 에뮬레이션 도구입니다. Netflix Chaos Monkey에서 영감을 받은 Pumba는 카오스 엔지니어링을 컨테이너 수준으로 가져옵니다 — 컨테이너를 kill, stop, pause, remove하고, 네트워크 지연과 패킷 손실을 주입하거나, 컨테이너 리소스에 스트레스 테스트를 수...
packj
Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...
CVE-2026-47668
CVE-2026-47668 DBGate = 7.1.8에서 인증되지 않은 RCE REF1: https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc REF2: https://github.com/Nxploited/CVE-2026-47668 rce.py /runners/start에서의 RCE 최소 구현, 권한 있음 프로세스가 ./public/ 폴더에 쓸 수 있다면 /favicon.svg 파일을 사용하여 명령 출력을 가져옵니다. root@kitploit: $...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit CVE-2022-1227을 익스플로잇하는 스크립트입니다. 배경 Ubuntu 20.10이 권장됩니다. Podman TODO: 이 취약점의 원리 추가하기 Podman 설치 공식 문서의 지침을 따르세요: https://podman.io/getting-started/installationinstalling-on-linux Ubuntu 20.10의 경우 설치 명령어는 다음과 같아야 합니다: root@kitploit: sudo apt-get install podman=3.4.4+ds1-1ubuntu1...
CVE-2026-24061
CVE-2026-24061 auth-bypass.py: UV + Python + telnetlib3을 사용한 CVE-2026-24061의 미니멀 구현체 run.sh / shell.sh: localhost:2323에서 공격 가능한 podman 컨테이너를 빌드하고 실행합니다...
Important: Red Hat Security Advisory: container-tools:rhel8 security update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
container-tools:ol8 security update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 2:1.10.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 2:1.9.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related:...
RHEL 8 : container-tools:rhel8 (RHSA-2026:63163)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63163 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/mail:...
globalping-probe v0.52.0
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...
EUVD-2026-58544
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods...
AZL-99144 CVE-2026-78662 affecting package podman 5.6.1-10
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99147 CVE-2026-56855 affecting package podman 5.6.1-10
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
GO-2026-6256 vulnerabilities
Vulnerabilities for packages: skaffold-fips, skaffold, podman-fips, trivy-operator-fips, kaniko, docker-fips, scorecard, kubescape, cloudbeat, cloudbeat-fips, trivy-fips, podman, conftest-fips, guac, conftest, zot, trivy, livekit-cli, kaniko-fips, kubescape-server, kubescape-server-fips...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, skaffold-fips, skaffold, podman-fips, buildkitd-fips, kaniko, docker-fips, telegraf, falcoctl-fips, kubescape, openbao-fips, podman, openbao, buildah, buildah-fips, falcoctl, kaniko-fips, kubescape-server, ctop-fips, docker-cli-buildx,...
