Docker-Security

Docker Security Questa è l'OWASP Docker Top 10. È un lavoro in corso. Informazioni su questo documento Questo documento descrive i 10 punti di sicurezza più importanti per costruire un ambiente containerizzato sicuro. Puoi usarlo come scheda specifica se parti da zero, oppure consegnarlo a un...

Log4Shell-PoC

██╗ ██████╗ ██████╗ ██╗ ██╗███████╗██╗ ██╗███████╗██╗ ██╗ ██║ ██╔═══██╗██╔════╝ ██║ ██║██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║ ██║██║ ███╗███████║███████╗███████║█████╗ ██║ ██║ ██║ ██║ ██║██║ ██║╚════██║╚════██║██╔══██║██╔══╝ ██║ ██║ ███████╗╚██████╔╝╚██████╔╝ ██║███████║██║...

KLAIOS

🛡️ KLAIOS – Manuale di Sistema v6.0 Nome: KLAIOS Kali Linux AI Operations System Versione: 6.0 Red Team Edition Stato: Operativo / Armato 1. Cos'è KLAIOS? KLAIOS è un ambiente di sicurezza ibrido. Combina la potenza offensiva di Kali Linux con la sicurezza di un bunker VPN e l'intelligenza della...

cyber-decoy

cyber-decoy Ein containerisierter Netzwerk-Köder Honeypot, der SSH , RDP und SMB annonciert, jede eingehende Verbindung mit eBPF beobachtet und jede Sitzung per Reverse-Proxy in einen isolierten Köder-Container leitet. Das Design trennt zwei Aufgaben: 1. Beobachtung. Ein eBPF-TC-Klassifikator, de...

kubesploit

Kubesploit Kubesploit è un server e agente di Command & Control HTTP/2 cross-platform per post-exploitation progettato specificamente per ambienti containerizzati, scritto in Golang e basato sul progetto Merlin di Russel Van Tuyl @Ne0nd0g. La Nostra Motivazione Durante la ricerca su Docker e...

pentest_lab

Laboratório de Pentest Não estou mais desenvolvendo ativamente isso, mas vou corrigir bugs e analisar issues e pull requests. Ajuda é apreciada : Este laboratório local de pentest utiliza docker compose para levantar vários serviços vítimas e um serviço atacante rodando Kali Linux. Se você execut...

nuclei-templates-labs

🎯 Nuclei-Templates-Labs Eine umfassende Sammlung verwundbarer Umgebungen, kombiniert mit einsatzbereiten Nuclei-Templates für praktische Sicherheitstests und zum Lernen! 🚀 🎭 Überblick Nuclei-Templates-Labs bietet Sicherheitsbegeisterten, Forschern und Lernenden: Kontrollierte Umgebungen für...

mailcow-dockerized

mailcow: dockerizzato - 🐮 + 🐋 = 💕 Vuoi supportare mailcow? Per favore, considera un contratto di supporto con Servercow per sostenere lo sviluppo futuro. Noi supportiamo te mentre tu supporti noi. : Puoi anche ottenere una SAL che è un pagamento una tantum senza obblighi o commissioni ricorrenti...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

Dockerized-CVE-2019-14287

Dockerisiertes CVE-2019-14287 Containerisierte und bereitstellbare Nutzung der Schwachstelle CVE-2019-14287. Weitere Informationen in README.md. Dieses CVE betrifft alle Versionen von sudo unter 1.8.28 , bei denen ein sudo-Benutzer durch Referenzierung seiner Benutzer-ID zu root eskalieren kann...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

ARTIF

ARTIF ARTIF è un nuovo framework avanzato di threat intelligence in tempo reale che aggiunge un ulteriore livello di astrazione sopra MISP per identificare minacce e traffico web dannoso sulla base della reputazione IP e dei dati storici. Esegue inoltre arricchimento automatico e scoring delle...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Gemäß den Bedingungen des Vertrags...

containerized-data-importer1.66-api-1.66.0-1.1 on GA media (moderate)

containerized-data-importer1.66-api-1.66.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11514-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832...

PT-2026-76440

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7

CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7. A patched version of the package is available...

CVE-2026-17527

In containerized-data-importer CDI, the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authoriz...

CVE-2026-17527

In containerized-data-importer CDI, the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authoriz...