Docker Remote API 未授权访问

介绍 docker 在使用集群管理如:Kubernetes,swarm时，要使用remote api对节点进行管理.remote api无认证时的默认端口是2375需要TLS认证默认登录是2376。 remote api默认是可以不需要认证能直接访问，能直接对docker进行操作,如新建容器,删除容器,查看镜像容器信息等... remote api操作方法见docker官方文档 检测docker remote api 未授权访问可以使用curl或者直接用浏览器访问 http://ip:2375/info 如果返回了json证明漏洞存在，如下图 其他参考链接...

SQL Injection Vulnerability in Elephant Swarm Website Management System

Elephant Herd Website Management System is a system developed by Century Elephant Herd Culture Communication Beijing Co. There is a generic SQL injection vulnerability in the Elephant Group website management system, and most websites have the same administrative password in the backend, allowing...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the kernel-image-2.4.27-sb1-swarm-bn operating system of Debian GNU/Linux may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

WordPress Facebook Promotion Plugin <= 1.3.4 - Multiple XSS

Because of these vulnerabilities in admin/swarm-settings.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...