CVE-2025-68613-n8n-lab

CVE-2025-68613 로컬 n8n 랩 이 저장소는 CVE-2025-68613의 로컬 테스트를 위해 취약한 n8n 인스턴스를 실행하는 간단한 Docker Compose 구성을 제공합니다. 요구 사항 Docker Desktop 또는 Docker Engine Docker Compose v2 빠른 시작 1. 컨테이너를 시작합니다: docker compose up -d 2. 브라우저에서 n8n을 엽니다: http://localhost:5678 3. docker-compose.yml에 설정된 기본 자격 증명으로 로그인합니다: 사용자...

CVE-2019-19356

CVE-2019-19356 cd CVE-2019-19356 docker-compose up -d...

CVE-2025-9074

CVE-2025-9074 – Windows 및 macOS Docker Desktop에서의 완전한 Docker 탈출 📌 설명 Docker Desktop은 내부 Docker Engine API를 http://192.168.65.7:2375 에 노출하며, 인증 및 접근 제어 없이 실행 중인 모든 컨테이너가 접근할 수 있습니다. 엔진 자체가 호스트 파일시스템을 마운트할 수 있기 때문에, 컨테이너는 이 API를 호출하여 호스트 드라이브를 바인드 마운트하는 새 컨테이너를 생성 하고, 그 컨테이너를 통해 호스트 파일을 임의로 읽고 쓸 수...

CVE-2017-5638-Attack-and-Defense

Apache Struts2 S2-045 방어 및 공격 실습 랩 Apache Struts2 S2-045 취약점CVE-2017-5638에 대한 공격 과 방어 를 모두 시연하는 Docker 기반 보안 실습 랩입니다. 이 랩에는 다음이 포함됩니다: 1. 취약한 애플리케이션 : Struts 2.3.31 S2-045에 취약 - 공격 시연용 2. 방어 랩 : WAF 보호 기능이 있는 Struts 6.3.x 패치됨 - 방어 훈련용 ⚠️ 보안 경고 : 이 랩에는 실제 작동하는 익스플로잇 과 취약한 코드 가 포함되어 있습니다. 격리된 환경에서만...

K000163600: Spring Tools for Eclipse vulnerability CVE-2026-47873

Security Advisory Description The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...

CVE-2021-41773-Playground

CVE-2021-41773-Playground CVE-2021-41773 と CVE-2021-42013 で遊ぶための Docker イメージ集です。 docker compose up -d を実行すると、すべてのコンテナを起動できます。 サーバーはポート 8080、8081、8082、8083 で動作します。 8080 は CGI が無効の Apache 2.4.49 です。 8081 は CGI が有効の Apache 2.4.49 です。 8082 は CGI が無効の Apache 2.4.50 です。 8083 は CGI が有効の Apache 2.4.50 です...

CVE-2026-107444

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

CVE-2026-107444 Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

CVE-2026-107444 Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

CVE-2026-107444

A flaw in Katello allows for a cross-organization authorization bypass via the Docker Tags repositories API . Because the API fails to properly enforce organization scoping when listing repositories for a Docker meta tag, an authenticated user with permission to view products in one organization ...

EUVD-2026-94692

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

CVE-2026-107444

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

MobSF_AI

MobSF AI Sidecar このプロジェクトは、Mobile Security Framework MobSF にAI搭載のチャットアシスタントを追加します。セキュリティアナリストは、MobSFが生成した分析レポートについて、インターフェース内で直接質問でき、OpenAIのモデルを活用します。 特徴 シームレスな統合 : Nginxリバースプロキシを使用して、特化したチャットインターフェースをMobSFレポートに直接注入します。 コンテキスト認識 : AIアシスタントは現在の分析レポート（静的解析）を自動的に取得し、それをコンテキストとして質問に回答します。 インタラクティブQ &...

[SECURITY] Fedora 44 Update: docker-buildx-0.37.2-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

PT-2026-108133

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes performed case-sensitive comparisons of OAuth token-endpoint hostnames when determining if managed credential responses should be masked, whereas request routing...

PT-2026-108131

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes may fail open when masking credentials in protected proxy responses. This occurs when a response-body read returns data simultaneously with an error, causing affecte...

PT-2026-108132

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description The egress proxy in Docker Sandboxes may forward client-supplied credentials along with credentials injected by the host. This occurs because the proxy only removes alternate...

CVE-2026-92543

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

PT-2026-107790

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

CVE-2021-41773-Apache-Path-Traversal-Lab

Apache CVE-2021-41773 Security Lab A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773 , a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49. 📌 Project Overview This project...