439 matches found
sysbox
Introducción Sysbox es un runtime de contenedores de código abierto y gratuito un "runc" especializado, desarrollado originalmente por Nestybox adquirida por Docker en 05/2022, que mejora los contenedores de dos maneras clave: Mejora el aislamiento de los contenedores: User-namespace de Linux en...
proxmox-lxc-docker-fix
Solución para AppArmor en LXC de Proxmox para Docker/Contenedores Solución para CVE-2025-52881 : Corrige la rotura de Docker, Podman y otros entornos de ejecución de contenedores en contenedores LXC de Proxmox causada por incompatibilidad de AppArmor con runc 1.2.7+/1.3.2+ 🚨 El Problema...
ShadowClone
ShadowClone ShadowClone te permite distribuir dinámicamente tus tareas de larga duración a través de miles de funciones serverless y te da los resultados en cuestión de segundos donde habría tomado horas completarlas. Puedes aprovechar al máximo los niveles gratuitos proporcionados por los...
whoc
whoc एक कंटेनर इमेज जो अंतर्निहित कंटेनर रनटाइम को निकालती है और इसे एक रिमोट सर्वर पर भेजती है। अपने पसंदीदा CSP कंटेनर प्लेटफॉर्म के अंतर्निहित कंटेनर रनटाइम को परखें! WhoC at Defcon 29 Cloud Village Azurescape - whoc-संचालित शोध, पब्लिक क्लाउड में पहला क्रॉस-अकाउंट कंटेनर अधिग्रहण 70,000$...
CVE-2021-1056
CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...
cve-2024-21626
CVE-2024-21626 نظرة عامة يحتوي هذا المستودع على أمثلة كود لتطبيق ضعيف مقابل CVE-2024-21626 بالإضافة إلى أداة eBPF لاكتشاف محاولات الاستغلال. تم إنشاء هذا المستودع كجزء من مقالة المدونة هذه blog post. برنامج الأداة المستخدم لكشف هذه الثغرة هو لأغراض توضيحية فقط. إنه ليس كشفًا كاملاً عن...
CVE-2019-5736-Custom-Runtime
CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implemented using a shallow, self-written container runtime to understand the exploit. Exploit is based on and almost all copied from the runc-poc by twistlock: https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC Contain...
CVE-2024-21626-POC
CVE-2024-21626-POC Instrucciones de uso Solo para fines educativos/de investigación. Cualquier comportamiento no relacionado con la educación/investigación es bajo su propio riesgo. Uso root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal...
cve-2019-5736-poc
CVE-2019-5736 प्रूफ ऑफ कॉन्सेप्ट यह होस्ट runc बाइनरी में एक स्ट्रिंग जोड़ता है। अपना पेलोड स्वयं लाएँ stage2.c देखें। चलाने के लिए: root@kitploit: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
CVE-2026-17113
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113
CRI-O is vulnerable in its container-creation environment-variable handling (mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/container_create.go). When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to the target OCI image's confi...
CVE-2026-73500 vulnerabilities
Vulnerabilities for packages: kyverno, cilium, cert-manager, loki, commercial-grafana, hubble, multicluster-controlplane-fips, external-dns, kubernetes, milvus, kine, multicluster-controlplane, reports-server, kots, minio, dapr, rancher-support-bundle-kit, kube-conformance, cilium-cli...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: opentelemetry-ebpf-instrumentation-fips, opentelemetry-ebpf-instrumentation, docker-fips, rke2-runtime-fips, cosmo-router-fips, vitess, cilium, envoy-gateway-fips, delve, gitaly-fips, beats, hubble, splunk-otel-collector, rke2-runtime, containerd, kuma, prometheus,...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: druid, kafbat-ui, thingsboard, kayenta-fips, solr-fips, airbyte-server-fips, ghidra, wazuh-indexer, zipkin, spark, traccar, flink, flink-kubernetes-operator-fips, pinot-fips, conductor, hono, apache-activemq-artemis, kayenta, nacos-docker, apache-hop, akhq,...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...