CVE-2025-9074

CVE-2025-9074: RCE no autenticado en la API de Docker Engine Gravedad : CRÍTICA | Puntuación CVSS : 9.8 estimada | Versiones afectadas : Docker Desktop 4.44.3 Un exploit de prueba de concepto para CVE-2025-9074, una vulnerabilidad de ejecución remota de código no autenticada en la API de Docker...

PoC-for-CVE-2025-9074

CVE-2025-9074 - PoC de Acceso No Autenticado a la API de Docker 📌 Descripción general Este repositorio proporciona un exploit de Prueba de Concepto PoC para CVE-2025-9074 , que implica la exposición no autenticada de la API de Docker Engine en el puerto TCP 2375. Un atacante que pueda acceder a...

CVE-2025-9074

CVE-2025-9074 - Docker 远程 API（实验室 PoC） ⚠️ 免责声明： 本仓库仅供教育和研究目的 使用。 请不要 在您拥有控制权之外的环境中使用此代码。 作者对滥用行为不承担任何责任。 概述 本仓库包含针对 CVE-2025-9074 的概念验证（PoC），这是一个涉及 Docker 远程 API 的配置错误漏洞。 当 Docker 守护进程未经验证暴露时，攻击者可以发出 API 请求来创建和启动容器。 此 PoC 在安全可控的环境中演示了该问题。 注意： 此漏洞已修复。 原始文章 原始研究和文章归功于： 🔗 qwertysecurity.com – 博客文章...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell Un script bash ligero y sin dependencias que te proporciona un shell interactivo emulado dentro de un contenedor Docker — usando solo curl, dd, od y awk. Sin Python, sin jq, sin editor necesario. Creado para entornos donde solo tienes acceso raw a la terminal y necesitas ejecutar...

CVE-2025-9074-POC

CVE-2025-9074-POC CVE-2025-9074 的概念验证漏洞利用 ⚠️ 法律免责声明 本 PoC 仅用于教育及授权的安全测试目的。 未经授权利用系统属违法行为，且不符合道德规范。 请仅在您拥有所有权的环境或已获得明确测试授权的环境中使用本 PoC。 使用方法 ./cve-2025-9074.sh 192.168.65.7 2375 在运行脚本之前，请确保您已启动一个 nc 监听器。...

CVE-2025-9074-Poc

RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecución local se conecten a la API del motor de Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...

EUVD-2016-10035

Malware in sbrugna...

Exploit for CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Ov...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...

CVE-2016-9223: Undefined Security Weakness

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...