15 matches found
LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-
LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- Der PoC zeigt, wie man PostgreSQL-Daten über das Hugefile-Subsystem auslesen kann. Basiert auf https://x.com/spendergrsec/status/1993794163880718700?s=20...
CVE-2020-8559
Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit Dies dient ausschließlich Demonstrationszwecken. Nur für den Einsatz auf Systemen, für die Sie autorisiert sind, administrative Aktionen durchzuführen und CVE-2020-8559 auszunutzen. Dies ist ein PoC für CVE-2020-8559. Diese Schwachstelle...
CVE-2023-22077
CVE-2023-22077 CVE Proof of Concept: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...
CVE-2023-1206-CVE-2025-40040-CVE-2024-49882
Canale Nascosto Combinato: CVE-2023-1206 + CVE-2024-49882 Panoramica Questo progetto dimostra un canale di comunicazione nascosto che utilizza due vulnerabilità del kernel Linux: Componente| CVE| Scopo ---|---|--- Canale di Sincronizzazione| CVE-2023-1206| Sincronizzazione dell'orologio tramite...
page_inject
pageinject - AFALG aead containerübergreifende Escape AFALG aead-Schwachstellen-Exploit für Containerflucht – pivotiere von einem kompromittierten Container in jeden anderen Container, der dieselbelibc.so.6-Ebene des Images nutzt. Hierbei handelt es sich um ein Escape-Primitiv : Es wird von...
CVE-2026-54727
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...
PYSEC-2026-934 OpenStack Object Storage (Swift) Sensitive Data Exposure
OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...
CVE-2026-42088
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script-runner-api container. Because all the...
PT-2026-36882
Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS versions prior to 7.0.0-rc3 Description The Script Runner widget allows users to execute Python and Ruby scripts directly from the 'openc3-COSMOS-script-runner-api' container. Since all Docker containers share a network, users ca...
PT-2026-26419
Summary In [email protected], sandbox network hardening blocks network=host but still allows network=container:. This can let a sandbox join another container's network namespace and reach services available in that namespace. Preconditions and Trust Model Context This issue requires a...
UBUNTU-CVE-2025-54410
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...
eBPF-Attack
eBPF-Attack This is the PoC for our paper: Cross Container A...
USN-4881-1 containerd vulnerability
It was discovered that containerd incorrectly handled certain environment variables. Contrary to expectations, a container could receive environment variables defined for a different container, possibly containing sensitive information...