CVE-2026-101998

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour Ce code est uniquement à des fins éducatives et pour des environnements contrôlés comme les laboratoires Hack The Box. Ne pas utiliser sur des systèmes sans autorisation. Ce dépôt contient un script d'exploitation pour la vulnérabilité Docker Remote AP...

CVE-2020-13925

CVE-2020-13925 Mise en place de l'environnement Référence : https://github.com/apache/kylin Déployez l'environnement avec Docker en utilisant la version 3.0.1 version vulnérable. Vous pouvez supprimer -m 8G \ qui sert à allouer la mémoire. Ensuite, accédez à http://host:7070/kylin/login. Le nom...

CVE-2026-105452

Docker Sandboxes are vulnerable to a flaw in the egress proxy , which may forward unrecognized client-supplied credentials alongside credentials injected by the host. The proxy only removes alternate credentials if they match specific known sentinel values; consequently, untrusted code within an ...

EUVD-2026-95159

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-105452 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-101998

Docker Sandboxes are vulnerable to a fail-open response masking issue where certain handlers may forward unmasked bytes when a response-body read returns data alongside an error. This vulnerability allows code running inside an authorized sandbox to potentially recover sensitive host-managed OAut...

CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

EUVD-2026-95157

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2026-105570

Docker Sandboxes are vulnerable to a security bypass where OAuth response masking can be circumvented using a case-variant token host . The root cause is a discrepancy in case sensitivity handling: the system compares OAuth token-endpoint hostnames case-sensitvely for masking decisions, but reque...

CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

EUVD-2026-95156

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

Container_escape

Disposable Ubuntu container VM This directory builds and runs an Ubuntu Docker container inside a disposable Ubuntu QEMU guest. PoCs are copied into the guest and are never executed by the host scripts. Host dependencies Bash QEMU x86-64 and qemu-img curl OpenSSH client tools xorriso socat only...

CVE-2023-50164-PoC

CVE-2023-50164 уязвимость обхода пути Apache Struts, приводящая к RCE — Proof of Concept Этот PoC создан для тестирования RCE удалённого выполнения кода путём эксплуатации уязвимости Apache Struts2. Соберите образ и запустите контейнер: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc && dock...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Лаборатория Docker: уязвимая vs пропатченная версия Локальная Docker-лаборатория для сравнения WPvivid Backup & Migration: Уязвимая: 0.9.123 Пропатченная: 0.9.124 Создана для учебной практики настройка лаборатории, проверка, логи, заметки. Всё, что связа...

CVE-2026-23744-Lab

CVE-2026-23744 – MCPJam Inspector Docker Lab Этот репозиторий — небольшая Docker-лаборатория для сравнения уязвимой и пропатченной сборок MCPJam Inspector для CVE-2026-23744. Он предназначен для обучения и создания публичного портфолио по безопасности: быстрая настройка, наглядные доказательства ...

CVE-2021-4034

CVE-2021-4034 — Docker-контейнер с намеренно уязвимой версией Docker PoC для PwnKit: локальное повышение привилегий в polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Оригинальная ссылка: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE через обход проверки на стороне клиента Краткое описание В ходе тестирования безопасности экземпляра MotionEye, работающего в...

CVE-2026-27607

CVE-2026-27607 CVE-2026-27607에 대한 개념 증명PoC으로, GHSA-w5fh-f8xh-5x3p로 게시되었습니다. 실행 Node.js와 docker + compose가 필요합니다. 의존성 설치: npm ci 취약한 RustFS 인스턴스 시작: docker compose up 시작 완료 대기 데모 실행: ./exploit.js...