509 matches found
ShadowClone
ShadowClone ShadowClone allows you to distribute your long running tasks dynamically across thousands of serverless functions and gives you the results within seconds where it would have taken hours to complete. You can make full use of the Free Tiers provided by cloud providers and supercharge...
CVE-2024-21626-POC
CVE-2024-21626-POC Usage Instructions For educational/research purposes only. Any behavior not related to education/research is at your own risk. Usage docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh Start another terminal /bin/bash.copy Note Different docker/runc...
cve-2024-21626
CVE-2024-21626 Overview This repository contains code examples for an app vulnerable to CVE-2024-21626 as well as an eBPF gadget to detect exploitation attempts. This repoistory was created as part of this blog post. The gadget program used to detect this vulnerability is for demonstration purpos...
sysbox
Introduction Sysbox is an open-source and free container runtime a specialized "runc", originally developed by Nestybox acquired by Dockerdocker-acquisition on 05/2022, that enhances containers in two key ways: Improves container isolation: Linux user-namespace on all containers i.e., root user i...
CLEANSTART-2026-GT21836 containerd is an open-source container runtime
CVE-2026-53488 affects multiple packages. containerd is an open-source container runtime. See references for individual vulnerability details...
proxmox-lxc-docker-fix
Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...
CVE-2021-1056
CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...
CVE-2019-5736-Custom-Runtime
CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implemented using a shallow, self-written container runtime to understand the exploit. Exploit is based on and almost all copied from the runc-poc by twistlock: https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC Contain...
CLEANSTART-2026-SI36328 containerd is an open-source container runtime
CVE-2026-47262 affects multiple packages. containerd is an open-source container runtime. See references for individual vulnerability details...
CLEANSTART-2026-TJ87624 containerd is an open-source container runtime
CVE-2026-53488 affects multiple packages. containerd is an open-source container runtime. See references for individual vulnerability details...
CLEANSTART-2026-PR51007 containerd is an open-source container runtime
CVE-2026-53492 affects multiple packages. containerd is an open-source container runtime. See references for individual vulnerability details...
CLEANSTART-2026-EL49121 containerd is an open-source container runtime
CVE-2026-53489 affects multiple packages. containerd is an open-source container runtime. See references for individual vulnerability details...
Linux Distros Unpatched Vulnerability : CVE-2026-95838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories fo...
CVE-2026-47766
A flaw was found in crun, an OCI Container Runtime. When processing an OCI bundle where the container root filesystem's /dev directory is a symbolic link and /dev is not explicitly mounted, crun incorrectly follows this symlink outside the container's intended boundaries. This allows a local...
EulerOS 2.0 SP13 : containerd (EulerOS-SA-2026-4035)
According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...
EulerOS 2.0 SP11 : containerd (EulerOS-SA-2026-4308)
According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...
whoc
whoc Una imagen de contenedor que extrae el runtime de contenedor subyacente y lo envía a un servidor remoto. ¡Indaga en el runtime de contenedor subyacente de tu plataforma de contenedores CSP favorita! WhoC en Defcon 29 Cloud Village Azurescape - investigación impulsada por whoc, la primera tom...
cve-2019-5736-poc
CVE-2019-5736 Prueba de Concepto Esto agrega una cadena al binario runc del host. Trae tu propio payload ver stage2.c. Para ejecutar: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
