dd

dd Запуск контейнеров Linux на macOS без виртуальной машины. Что такое dd? dd запускает контейнеры Linux нативно на macOS с Apple Silicon без виртуальной машины. Нет ядра Linux и нет гипервизора под капотом: JIT транслирует код контейнера и обрабатывает его системные вызовы Linux в пользовательск...

CVE-2025-9074-Docker-Desktop-Container-Escape

CVE-2025-9074: PoC побега из контейнера Docker Desktop Эксплойт Proof of Concept для CVE-2025-9074 — критическая уязвимость побега из контейнера в Docker Desktop, позволяющая неавторизованный доступ к API Docker Engine. Обзор уязвимости Свойство| Значение ---|--- CVE ID| CVE-2025-9074 CVSS Score|...

CVE-2025-9074-PoC

Docker API: Неавторизованный RCE CVE-2025-9074 Критическая уязвимость CVE-2025-9074 в Docker Desktop позволяет локально запущенным Linux-контейнерам подключаться к API Docker Engine через подсеть по умолчанию 192.168.65.7:2375. Проблема сохраняется независимо от настроек Enhanced Container...

Exploit for CVE-2025-9074

CVE-2025-9074: Docker Engine API Unauthenticated RCE Seve...

Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID

Summary The hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URLs using fmt.Sprintf with the raw value instead of...

CVE-2026-27734

Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URL...

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...

Exploit for CVE-2025-9074

CVE-2025-9074: Docker Desktop Container Escape PoC !CVEhtt...

CVE-2025-9074 Docker Desktop allows unauthenticated access to Docker Engine API from containers

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

Docker Desktop 安全漏洞

Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

Alert: OracleIV DDoS Botnet Targets Public Docker Engine APIs to Hijack Containers

Publicly-accessible Docker Engine API instances are being targeted by threat actors as part of a campaign designed to co-opt the machines into a distributed denial-of-service DDoS botnet dubbed OracleIV. "Attackers are exploiting this misconfiguration to deliver a malicious Docker container, buil...

OracleIV DDoS Botnet Malware Targets Docker Engine API Instances

By Waqas While OracleIV is not a supply chain attack, it highlights the ongoing threat of misconfigured Docker Engine API deployments. This is a post from HackRead.com Read the original post: OracleIV DDoS Botnet Malware Targets Docker Engine API Instances...