CVE-2019-16097

CVE-2019-16097 Harbor 未授权创建管理员漏洞原理 docker及poc基于pocsuite框架...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

[SECURITY] Fedora 45 Update: cri-o1.36-1.36.6-1.fc45

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

kern

kern: runtime de contenedores sin root y sandbox sin daemon. Ejecuta llamadas a herramientas de agentes y código generado por LLM en contenedores aplicados por el kernel. Un contenedor real, aplicado por el kernel, en unos pocos milisegundos, desde un único binario estático y sin daemon. Soporte...

CVE-2021-41091

CVE-2021-41091 A bug in Moby Docker Engine allows unprivileged users to traverse directories and execute programs directly from the container on the host machine. If there is a suid program in the container, the user will be able to execute it as suid on the host machine. PoC In the container's...

CVE-2026-105764 Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code in server/src/repositories/media.repository.ts passed to libvips. Files that bypassed libvips' native SVG loader fell...

CVE-2026-105764 Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code in server/src/repositories/media.repository.ts passed to libvips. Files that bypassed libvips' native SVG loader fell...

mxc

Microsoft eXecution Container MXC MXC es un sistema de ejecución de código en sandbox para ejecutar código no confiable salida de modelos, plugins, herramientas en Windows, Linux y macOS. Proporciona múltiples backends de contención — desde sandboxes de procesos nativos del sistema operativo hast...

CVE-2025-9074

CVE-2025-9074 – Docker Desktop Windows Container→Host Write via Exposed Engine API Author: w01f Status: Proof-of-Concept educational / authorized testing only Overview This project demonstrates a PoC for CVE-2025-9074 , a misconfiguration/exposure in certain versions of Docker Desktop for Windows...

CVE-2026-105768

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

CVE-2022-25476

CVE-2022-25476 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...

CVE-2026-105768 apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

CVE-2026-105768

The apko tool, used to build OCI container images from apk packages, is vulnerable to a numeric truncation error (CWE-197) in versions 0.2.0 to before 1.4.5 . Specifically, the UserEntry.Parse and GroupEntry.Parse functions in pkg/passwd use strconv.Atoi to convert UID and GID fields to uint32 wi...

CVE-2026-105768 apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

CVE-2024-21626-old-docker-versions

Container escape vulnerability in old runc components CVE-2024-21626 During my analysis about CVE-2024-21626 I found that other older docker components are vulnerable about fd leakage that is not mentioned in the security advisory GHSA-xr7r-f8xq-vfvv. Read my full article for detailed explanation...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.4.5 security update

Updated Red Hat Enterprise Linux AI 3.4.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.4.5 security update

Updated Red Hat Enterprise Linux AI 3.4.5 container disk images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – Escape de contenedor mediante enlace simbólico /proc/self/fd Resumen Un volumen compartido montado con propagación rshared permite que un contenedor malicioso cree un enlace simbólico que apunte a un archivo del host a través de /proc/self/fd. El proceso del host que escribe en el...