443 matches found
lempo
Lempo: LDAP Exposure on POrtainer CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD This exploit is a complement to my talk Hacking Docker with PAZUZU. Presentations | Date| Conference| Link to Video| Link to Slides ---|---|---|---|--- 1| NOV-2018|...
CVE-2026-44881_exploit
CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...
CVE-2024-29296-PoC
Portainer CVE-2024-29296 Proof of Concept Script Requirements python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Usage python3 main.py Enter Target URL: Enter Username List: Credits Reported by: https://github.com/ThaySolis/CVE-2024-29296...
CVE-2026-44848-PoC
CVE-2026-44848 — Portainer: Missing Authorization on Docker Plugin Endpoints → Host RCE Proof-of-concept for CVE-2026-44848 , a missing-authentication CWE-862 vulnerability in Portainer that lets a non-admin user with Docker endpoint access perform privileged Docker plugin operations → full host...
CVE-2024-29296
CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...
GO-2026-6619 Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer
Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer...
PT-2026-105616
Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer...
ROS-20260921-73-0115
The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...
SUSE CVE-2026-55761
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. In versions 2.39.0 through 2.39.3 and 2.40.0 until 2.43.0, unauthenticated restore and administrator initialization...
GO-2026-6324 Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances in github.com/portainer/portainer
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances in github.com/portainer/portainer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...
EUVD-2026-42297
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...
GHSA-X626-FCWX-F5PC Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...
Exploit for Missing Authorization in Portainer
CVE-2026-44848 — Portainer: Missing Authorization on Docker Pl...
ROS-20260818-73-0009
The vulnerability in Portainer-Ce is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260818-73-0011
The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260818-73-0010
The vulnerability in portainer-ce is related to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260818-73-0037
The vulnerability in portainer-ce is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Portainer Edge Agent endpoints do not validate EdgeStack assignment, allowing unauthorized reads of unassigned stack files and forged status reports
Portainer Edge Agent Endpoint EdgeStack Assignment Authorization Bypass Vulnerability Overview Two categories of Portainer Server endpoints serving Edge Agents -- Edge Stack deployment-file retrieval and deployment status reporting -- resolve the reporting environment from the Edge ID in the...