CVE-2026-101998

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour Ce code est uniquement à des fins éducatives et pour des environnements contrôlés comme les laboratoires Hack The Box. Ne pas utiliser sur des systèmes sans autorisation. Ce dépôt contient un script d'exploitation pour la vulnérabilité Docker Remote AP...

CVE-2020-13925

CVE-2020-13925 Mise en place de l'environnement Référence : https://github.com/apache/kylin Déployez l'environnement avec Docker en utilisant la version 3.0.1 version vulnérable. Vous pouvez supprimer -m 8G \ qui sert à allouer la mémoire. Ensuite, accédez à http://host:7070/kylin/login. Le nom...

CVE-2026-105452

Docker Sandboxes are vulnerable to a flaw in the egress proxy , which may forward unrecognized client-supplied credentials alongside credentials injected by the host. The proxy only removes alternate credentials if they match specific known sentinel values; consequently, untrusted code within an ...

EUVD-2026-95159

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-105452 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-101998

Docker Sandboxes are vulnerable to a fail-open response masking issue where certain handlers may forward unmasked bytes when a response-body read returns data alongside an error. This vulnerability allows code running inside an authorized sandbox to potentially recover sensitive host-managed OAut...

CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

EUVD-2026-95157

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

EUVD-2026-95156

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

CVE-2026-105570

Docker Sandboxes are vulnerable to a security bypass where OAuth response masking can be circumvented using a case-variant token host . The root cause is a discrepancy in case sensitivity handling: the system compares OAuth token-endpoint hostnames case-sensitvely for masking decisions, but reque...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

Container_escape

Disposable Ubuntu container VM This directory builds and runs an Ubuntu Docker container inside a disposable Ubuntu QEMU guest. PoCs are copied into the guest and are never executed by the host scripts. Host dependencies Bash QEMU x86-64 and qemu-img curl OpenSSH client tools xorriso socat only...

CVE-2023-50164-PoC

CVE-2023-50164 Vulnérabilité de traversée de chemin vers exécution de code à distance dans Apache Struts - Preuve de concept Cette preuve de concept a été créée pour tester une exécution de code à distance RCE en exploitant la vulnérabilité Apache Struts2. Construisez l'image et exécutez un...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Lab Docker Vuln vs Patché Lab Docker local uniquement pour comparer WPvivid Backup & Migration : Vulnérable : 0.9.123 Patché : 0.9.124 Conçu pour la pratique d'apprentissage configuration du lab, vérification, journaux, notes. Tout ce qui est lié au PoC...

CVE-2026-23744-Lab

CVE-2026-23744 – MCPJam Inspector Docker Lab Ce dépôt est un petit laboratoire Docker pour comparer une version vulnérable vs une version corrigée de MCPJam Inspector pour CVE-2026-23744. Il est destiné à l'apprentissage et à la constitution d'un portfolio de sécurité public : configuration rapid...

CVE-2021-4034

CVE-2021-4034 — Docker-контейнер с намеренно уязвимой версией Docker PoC для PwnKit: локальное повышение привилегий в polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Lien original : https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via contournement de la validation côté client Résumé Lors de tests de sécurité d'une instance MotionEye exécutée dans Docker, il a...

CVE-2026-27607

CVE-2026-27607 Preuve de concept pour CVE-2026-27607, publiée sous GHSA-w5fh-f8xh-5x3p. Exécution Nécessite Node.js et docker + compose. Installer les dépendances : npm ci Démarrer l'instance RustFS vulnérable : docker compose up attendre le démarrage Exécuter la démo : ./exploit.js...