lempo

Lempo：Portainer上的LDAP暴露 CVE-2018-19466 | Mauro Eldritch（又名 plaguedoktor） root@kitploit: ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD 此利用程序是对我的演讲《使用PAZUZU黑入Docker》的补充。 演示 | 日期| 会议| 视频链接| 幻灯片链接 ---|---|---|---|--- 1| 2018年11月| DEVFEST Siberia| 待定|...

CVE-2024-29296

CVE-2024-29296 - Portainer CE 2.19.4 上的用户枚举漏洞 在 Portainer CE 2.19.4 中发现了一个用户枚举漏洞。该问题出现在用户身份验证过程中，响应时间的差异可能允许远程未认证用户判断用户名是否有效。 该漏洞已通过 Portainer 的 issue 11736 修复，该修复随 Portainer CE 2.19.5 和 2.20.2 版本一起发布。 摘要 漏洞类型：用户枚举（User enumeration） 产品厂商：Portainer 受影响产品代码库：Portainer CE - 2.19.4 攻击类型：远程 影响·信息泄露：是...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer: Falta de autorización en los endpoints de plugins de Docker → RCE en el host Prueba de concepto de CVE-2026-44848 , una vulnerabilidad de falta de autenticación CWE-862 en Portainer que permite a un usuario no administrador con acceso al endpoint de Docker realizar...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git 符号链接 → 任意主机文件读取 针对 CVE-2026-44881 的单脚本利用程序，该漏洞是 Portainer 堆栈部署流程中的一个 Git 符号链接注入，允许任何具有堆栈创建权限的低权限认证用户读取 Portainer 进程可访问的任意文件。 公告： GHSA-rpgq-m5fp-32wr 受影响版本： Portainer CE 2.33.0 – 2.33.7, 2.39.0 – 2.39.1, 2.40.x 修复版本： 2.33.8 LTS, 2.39.2 LTS, 2.41.0 STS 功能说明...

CVE-2024-29296-PoC

Portainer CVE-2024-29296 概念验证脚本 环境要求 root@kitploit: python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt 使用方法 root@kitploit: python3 main.py Enter Target URL: Enter Username List: 致谢 报告者： https://github.com/ThaySolis/CVE-2024-29296...

GHSA-X626-FCWX-F5PC Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances

Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...

EUVD-2026-42297

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...

ROS-20260818-73-0009

The vulnerability in Portainer-Ce is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260818-73-0037

The vulnerability in portainer-ce is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260818-73-0011

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260818-73-0010

The vulnerability in portainer-ce is related to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-72533

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

EUVD-2026-56003

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533

The CVE concerns Portainer CE (up to 2.44.0) with an authentication bypass in the Docker proxy path validation. Authenticated low-privilege users can bypass proxy authorization checks through non-canonical URL normalization, causing the proxy and authorization layer to interpret crafted requests ...

PT-2026-70108

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

The vulnerability of the Portainer container management platform, related to the improper implementation of authentication algorithms, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...