21 matches found
page_inject
pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...
CVE-2023-1206-CVE-2025-40040-CVE-2024-49882
Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...
LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-
LInux-Kernel-InfoLeak-6.12.-Aprovechado-para-hacer-fuga-de-información-entre-contenedores.- El POC muestra cómo filtrar datos de postgresql debido al subsistema hugefile. Basado en https://x.com/spendergrsec/status/1993794163880718700?s=20...
CVE-2023-22077
CVE-2023-22077 Prueba de concepto del CVE: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...
CVE-2020-8559
Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only. Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who h...
Debian dla-4801 : python3-swift - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4801 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4801-1 [email protected]...
PYSEC-2026-3607 proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component- Package: proot-distro- Affected command: restore- Attack surface: Host-side Termux CLI processing a user-supplied backup archive- Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write--- Affected Versions| Component | Version ||---|---|| proot-distro ...
CVE-2026-54727
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
CVE-2026-54727: Exposure of Resource to Wrong Sphere
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
PYSEC-2026-934 OpenStack Object Storage (Swift) Sensitive Data Exposure
OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...
CVE-2026-42088
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script-runner-api container. Because all the...
PT-2026-36882
Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS versions prior to 7.0.0-rc3 Description The Script Runner widget allows users to execute Python and Ruby scripts directly from the 'openc3-COSMOS-script-runner-api' container. Since all Docker containers share a network, users ca...
PT-2026-26419
Summary In [email protected], sandbox network hardening blocks network=host but still allows network=container:. This can let a sandbox join another container's network namespace and reach services available in that namespace. Preconditions and Trust Model Context This issue requires a...
UBUNTU-CVE-2025-54410
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...
eBPF-Attack
eBPF-Attack This is the PoC for our paper: Cross Container A...
USN-4881-1 containerd vulnerability
It was discovered that containerd incorrectly handled certain environment variables. Contrary to expectations, a container could receive environment variables defined for a different container, possibly containing sensitive information...