cve-2025-9074-poc

CVE-2025-9074 教育用 PoC・概念验证代码 本仓库包含一个用于教育目的的 PoC，演示了利用 Docker Engine 的未认证远程 API 创建可读写主机文件系统的特权容器的风险。 执行文件为 poc.go。 重要：本 PoC 仅限用于教育及防御目的。禁止在第三方环境或未经授权的系统上执行。 危险性评估 综合评估：严重 预估 CVSS v3.1 基本分：9.8 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 依据： 未认证即可访问 TCP/2375 → PR:N, UI:N, AV:N 通过特权容器 +...

vulnerable-container-hub

OWASP Vulnerable Container Hub 项目 背景 有许多仓库为想要学习安全的人提供易受攻击的环境，例如 Web 应用程序、容器或虚拟机，这不仅有助于学生或刚入行的人学习相关安全技术，也有助于安全专业人员保持实战经验。 在这些方法中，目前最简单的方式是使用容器（例如 docker 或 podman）。 只需一条命令（例如 docker run 或 docker compose up）即可运行容器，听起来很棒！ 问题陈述 问题在于，如果只是在不知道容器是如何构建的情况下运行它，你就无法准确知道它会做什么（尤其是考虑到它是一个易受攻击 的容器）。 Dockerfile...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour 此代码仅用于教育目的和实验室环境（如 Hack The Box）。未经授权不得在系统上使用。 此仓库包含一个针对 Docker Remote API 暴露漏洞（无认证）的利用脚本，该漏洞允许通过创建特权容器实现容器逃逸到宿主机。 该漏洞是在解决 Hack The Box 平台上的 MonitorsFour 机器时被发现的。 攻击者可以： 创建任意容器 在宿主机上执行命令 挂载宿主机文件系统 / 完全提升权限 利用基于： 对 tcp/2375 上未认证的 Docker API 的访问...

CVE-2025-9074

CVE-2025-9074: Docker Engine API Unauthenticated RCE Severity : CRITICAL | CVSS Score : 9.8 estimated | Affected Versions : Docker Desktop 4.44.3 A proof-of-concept exploit for CVE-2025-9074, an unauthenticated Remote Code Execution vulnerability in Docker Engine API that allows privileged...

CVE-2026-78424

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies write permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the...

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence AI agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md...

CVE-2026-86114: Missing Authorization

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

poc-container-escape

poccontainerescape Enumeración y explotación de vectores...

CVE-2026-62941 Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check AllowInstanceCreation runs BEFORE the source instance's configuration is merged into the request. Dangerous configuration keys including...

CVE-2026-62940: Missing Authorization

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...

CVE-2026-73218 Cursor: Sandbox escape via launching privileged containers

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...

CVE-2026-73218 Cursor: Sandbox escape via launching privileged containers

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...

CVE-2026-73218

Cursor for macOS prior to 3.0.0 is vulnerable to a sandbox escape: an agent in Auto-Run Sandbox mode, with Docker Desktop and the Dev Containers CLI installed, can launch a privileged container and mount Docker’s virtiofs0. This grants read/write access to the user’s home directory and enables ho...

PT-2026-70833

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

Summary A follow-up bypass of the round-4 PodSpec hardening GHSA-gx55-f84r-v3r7, GHSA-wmgg-3p4h-48x7, GHSA-v455-mv2v-5g92. Those advisories validate and sanitize the PodSpec spec.runtime.podSpec / spec.builder.podSpec / function.spec.podSpec, but the Environment CRD also exposes...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Mobyproject Moby

CVE-2026-34040 Full Lab PoC Docker/Moby AuthZ Plugin Bypass...

PT-2026-39897

Name of the Vulnerable Software and Affected Versions local-path-provisioner versions prior to 0.0.36 Description A malicious user with permissions to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template. This template is used to crea...

k8s-container-escape-lkm

🛠️ Kernel Module Reverse Shell – Privileged Container Escape P...

EUVD-2018-2912

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-20188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abuse...