dockle

Dockle - أداة فحص صور الحاويات للأمان، تساعد في بناء أفضل صورة Docker وفقًا لأفضل الممارسات، سهلة البدء Dockle يساعدك في: 1. بناء صور Docker وفقًا لأفضل الممارسات 2. بناء صور Docker آمنة تشمل نقاط التفتيش معايير CISbash $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ brew insta...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner ByDaniel Garcia cr0hn | GitHub | Website Features • Installation • Quick Start • Documentation • Use Cases • What's New • Contributing 📑 Table of Contents Overview Features What's New in v2.0 Installation Quick Start Usage Private...

dockerscan

DockerScan v2.0 Le scanner de sécurité Docker le plus complet ParDaniel Garcia cr0hn | GitHub | Site Web Fonctionnalités • Installation • Démarrage rapide • Documentation • Cas d'utilisation • Nouveautés • Contribuer 📑 Table des matières Aperçu Fonctionnalités Nouveautés dans v2.0 Installation...

vulnerable-container-hub

Le projet OWASP Vulnerable Container Hub Contexte Il existe de nombreux dépôts qui fournissent des environnements vulnérables, tels que des applications web, des conteneurs ou des machines virtuelles, à ceux qui souhaitent apprendre la sécurité. Cela aide non seulement les étudiants ou les...

Docker-Security

Sécurité Docker Ceci est le Top 10 Docker de l'OWASP. C'est un travail en cours. À propos de ce document Ce document décrit les 10 points de sécurité les plus importants pour construire un environnement conteneurisé sécurisé. Vous pouvez l'utiliser comme une fiche de spécification si vous partez ...

DockSec v2026.9.21

!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...

CVE-2026-55581

mcp-shell is an MCP server for running shell commands securely. Prior to 0.6.0 , the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell -c flag. A caller of the shel...

PT-2026-81351

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description An OS command injection issue exists in the shell exec MCP tool. The software implements a secure mode that restricts command execution to an allowlist defined in security.yaml. However, the defaul...

EUVD-2026-31484

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Summary When a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with daemon host root privileges. Details When handling PUT /containers/id/archive requests with compressed archives, the daemon decompresses them using external system binaries. Due to...

PT-2026-41036

Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions 2.33.0 through 2.33.7 Portainer Community Edition versions 2.39.0 through 2.39.1 Portainer Community Edition versions 2.40.0 through 2.40.x Portainer Community Edition versions prior to 2.33.0 Description...

EUVD-2020-21940

Malware in sbrugna...

EUVD-2019-0160

Malware in sbrugna...

EUVD-2024-52170

Malicious code in bioql PyPI...

CVE-2025-54410 Moby's Firewalld reload removes bridge network isolation

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

SUSE-SU-2025:02366-2 Security update for docker

This update for docker fixes the following issues: Update to Docker 28.2.2-ce bsc1243833, bsc1242114: - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction bsc1241830. Other bugfixes: - Always clear SUSEConnect sus...

CVE-2025-53372

CVE-2025-53372 concerns the node-code-sandbox-mcp MCP Server (Node.js) prior to version 1.3.0, which is vulnerable to command injection through unsanitized input used in a call to a shell command via child_process.execSync. Exploitation can allow remote code execution with the server process’s pr...

PT-2025-25764 · Unknown +3 · Portainer Community Edition +4

Name of the Vulnerable Software and Affected Versions: Portainer Community Edition versions prior to 2.31.0 STS and prior to 2.27.7 LTS Description: The issue affects a lightweight service delivery platform for containerized applications, allowing management of Docker, Swarm, Kubernetes, and ACI...

SUSE-SU-2025:20393-1 Security update for docker

This update for docker fixes the following issues: Always clear SUSEConnect suse secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with...

PT-2025-20883 · Undefined · Undefined

2025-05-13 19:01:23.477089 UTC +09:00 1. CVE-2025-41645 CERTVDE SMA: Sunny Portal demo system privilege escalation An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake. https://vulners.com/cve/CVE-2025-41645...