Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

OwnCloud-CVE-2023-49103

Чтобы собрать контейнер, выполните: 1: Скачайте папку, распакуйте и соберите контейнер. 2: docker build -t cve-2023-49103 ./ 3: docker run --name cve-2023-49103 -p 80:80 -p 443:443 cve-2023-49103...

container-escape-ebpf

Белая книга https://www.scs-europe.net/dlib/2026/2026-0321.html Допущения На хосте используется уязвимая версия runc: Для CVE-2025-31133: 1.2.7 и ниже, с 1.3.0-rc.1 по 1.3.2, 1.4.0-rc.1 и 1.4.0-rc.2. Для CVE-2024-21626: с 1.0.0-rc93 по 1.1.11. Непривилегированный пользователь может создавать...

CVE-2019-16097

CVE-2019-16097 Принцип уязвимости неавторизованного создания администратора в Harbor, docker и PoCна основе фреймворка pocsuite...

cve-2019-5736-poc

CVE-2019-5736 Доказательство концепции Это добавляет строку к двоичному файлу runc на хосте. Используйте собственную полезную нагрузку см. stage2.c. Для запуска: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

[SECURITY] Fedora 45 Update: cri-o1.36-1.36.6-1.fc45

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

kern

kern: 데몬 없는 루트리스 컨테이너 런타임이자 샌드박스. 에이전트 도구 호출과 LLM이 생성한 코드를 커널이 강제하는 컨테이너 안에서 실행합니다. 몇 밀리초 만에, 데몬 없이 단일 정적 바이너리 하나로 만드는 진짜 커널 강제 컨테이너. MCP 지원 : Kern Sandbox를 통해 Claude Code, Cursor, Claude Desktop, LM Studio에서 사용 가능. 유휴 시 RAM 0 · 데몬도, 소켓도, 시작할 것도 없음 · 단일 정적 바이너리, 유일한 Rust 의존성은 libc Linux. Windows...

CVE-2021-41091

CVE-2021-41091 Ошибка в Moby Docker Engine позволяет непривилегированным пользователям обходить каталоги и выполнять программы напрямую из Docker на основной машине: если в Docker есть программа с SUID, пользователь сможет выполнить её как SUID на основной машине PoC В терминале контейнера...

CVE-2026-105764 Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code in server/src/repositories/media.repository.ts passed to libvips. Files that bypassed libvips' native SVG loader fell...

CVE-2026-105764 Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code in server/src/repositories/media.repository.ts passed to libvips. Files that bypassed libvips' native SVG loader fell...

CVE-2025-9074

CVE-2025-9074 – 노출된 엔진 API를 통한 Docker Desktop Windows 컨테이너→호스트 쓰기 Author: w01f 상태: 개념 증명 교육 / 승인된 테스트 전용 개요 이 프로젝트는 CVE-2025-9074 에 대한 PoC를 시연합니다. 이 취약점은 Docker Desktop for Windows 의 특정 버전에서 Docker Engine HTTP API 가 http://192.168.65.7:2375에서 컨테이너때로는 SSRF를 통해에서 접근 가능하여 공격자가 바인드 마운트 로 Windows 호스트...

mxc

Microsoft eXecution Container MXC MXC는 Windows, Linux, macOS에서 신뢰할 수 없는 코드모델 출력, 플러그인, 도구를 실행하기 위한 샌드박스 코드 실행 시스템 입니다. OS 네이티브 프로세스 샌드박스부터 완전한 VM에 이르기까지 다양한 격리 백엔드를 통합된 JSON 구성 스키마와 TypeScript SDK 뒤에 제공합니다. !WARNING 이 저장소에는 Microsoft Execution Containers에 대한 조기 통합과 개발자 피드백을 가능하게 하기 위해 게시된 코드의 초기...

CVE-2026-105768

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

CVE-2022-25476

CVE-2022-25476 ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 설정 예시: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash ...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Обзор Демонстрация доказательства концепции PoC и учебная среда для CVE-2025-31133 — уязвимости безопасности в runc, позволяющей обойти защиту maskedPaths через состояние гонки. maskedPaths предназначены для предотвращения доступа контейнеров к чувствительным путям...

CVE-2026-105768 apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

CVE-2026-105768

The apko tool, used to build OCI container images from apk packages, is vulnerable to a numeric truncation error (CWE-197) in versions 0.2.0 to before 1.4.5 . Specifically, the UserEntry.Parse and GroupEntry.Parse functions in pkg/passwd use strconv.Atoi to convert UID and GID fields to uint32 wi...

CVE-2026-105768 apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

CVE-2024-21626-old-docker-versions

Уязвимость побега из контейнера в старых компонентах runc CVE-2024-21626 В ходе моего анализа CVE-2024-21626 я обнаружил, что другие старые компоненты Docker также уязвимы к утечке fd что не упоминается в бюллетене безопасности GHSA-xr7r-f8xq-vfvv. Полное объяснение читайте в моей статье здесь. 1...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.4.5 security update

Updated Red Hat Enterprise Linux AI 3.4.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...