15599 matches found
EXPLOIT-CVE-2026-26216
CVE-2026-26216 — Crawl4AI unauthenticated RCE via hooks GHSA-5882-5rx9-xgxp CVSS 10.0 · pre-auth RCE · CWE-94 Code Injection Unauthenticated remote code execution on the Crawl4AI Docker server field. This code is executed with exec inside a "homemade sandbox" — a restricted builtins dictionary...
CVE-2019-5010
CVE-2019-5010 Author: Jonathan M. Wilbur Copyright Year: 2019 License: MIT License How to use 1. Install all dependencies by running npm install. 2. Compile the project using npm run build. 3. Run node ./dist/index.js to create the evil certificate in ./dist/cve-2019-5010-cert.pem. 4. Bring up th...
CVE-2019-5736-PoC
Usage PoC was created to the scenario were victim is executing for example docker exec sh. Before running exploit it's required to overwrite sh binary in the container file system: root@kitploit: printf '!/proc/self/exe' /bin/sh After that, when victim executes exec command, runc binary in the ho...
CVE-2025-9074-Poc
RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecución local se conecten a la API del motor de Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...
CVE-2025-23266
CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...
AWS-SAM-CLI-Vulnerabilities
AWS SAM CLI Vulnerabilities CVE-2025-3047 & CVE-2025-3048 This README provides a detailed analysis of two security vulnerabilities found in the AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 and CVE-2025-3048 – along with the code-level issues and fixes. Both vulnerabilities...
CVE-2020-7693
CVE-2020-7693 Poc Note: I Confirm Payload for CVE-2020-7693 can running in Bug Bounty Program Description: Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Single Request Crashes Serve...
EUVD-2026-71946
Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...
CVE-2026-86114 Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints
Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...
React2Shell
React2Shell — Vulnerable Lab CVE-2025-55182 React2Shell is an intentionally vulnerable React.js application provided for educational and research related to CVE-2025-55182. It contains deliberately insecure code and must not be used in production. The project is packaged and run using Docker,...
canarytokens-docker
Dockerized Canarytokens por Thinkst Applied Research Resumen Los Canarytokens ayudan a rastrear la actividad y las acciones en tu red. Si tienes algún problema, consulta nuestras FAQ aquí, o crea un issue e intentaremos responderte lo antes posible. Tabla de contenido Código de conducta Requisito...
Threat_Model_Examples
Threat Model Examples This repository contains various threat model examples for different technologies and systems. These resources provide illustrative examples of threat models across different domains, helping security professionals, developers, and researchers better understand how threat...
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...
Oracle Linux 8 : ELSA-2026-63163-0: / container-tools:ol8 (ELSA-2026-631630)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-631630 advisory. - rebuild with updated Go to fix CVE-2026-42499 - rebuild with updated Go to fix CVE-2026-42499 - rebuild with Go 1.25.11 to fix CVE-2026-33818,...
PT-2026-86395
Name of the Vulnerable Software and Affected Versions AutoAgent affected versions not specified Description An unauthenticated remote code execution issue exists in the TCP server that binds to all interfaces. This allows an attacker to connect to the exposed communication port and execute...
leaky-vessels-dynamic-detector
WARNING This repository is now archived. No more updates will be made to the code and it may be insecure or even broken by the time you read this notice. Consider it for historical purpose only and treat it carefully. Leaky Vessels Dynamic Detector In this repository you'll find a reference...
POC-CVE-2019-5736
RunC-CVE-2019-5736 Video : https://bit.ly/2WqvILb Entrada del blog : www.idealhax.blogspot.com/2020/05/breaking-out-of-docker-via-runc.html Aquí, me gustaría mencionar que el desarrollador original de este exploit es Yuval Avrahami de Twistlock Labs. Ejecutar los POCs Ten en cuenta que ejecutar l...
CVE-2026-41567
CVE-2026-41567 1day One day for Docker Escape CVE-2026-41567. It is a demonstration of docker escape using trojanized xz / unpigz. It can be easily modified to be used remotely i.e. just modify the docker default IP with a remote C2. More information on the exploit here PoC Run a netcat listening...
Azure
Azure Offensive Security Toolkit A collection of Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container security, Key Vault exposure, Entra ID configuration, and more. Designed to run in Azure Cloud Shell or any authenticated terminal. Scripts IAM...