Kimai-CVE-2026-52824-POC

Kimai CVE-2026-52824 — デフォルト APPSECRET 認証バイパス 注記: リポジトリの URL には古い CVE ID（CVE-2026-49865）が含まれています。このリポジトリで追跡されている正しい最新の CVE は CVE-2026-52824 （GHSA-jr9p-4h4j-6c58）です。 Kimai タイムトラッキング（バージョン ≤ 2.57.0）におけるハードコードされたデフォルト APPSECRET 脆弱性の概念実証エクスプロイトツールキット。未パッチの Docker デプロイメントにおいて、偽造された KIMAIREMEMBER Cooki...

Linux Distros Unpatched Vulnerability : CVE-2026-103433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through...

@nx/express (>=23.0.0-beta.0, <=23.1.0), @nx/nest (>=23.0.0-beta.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0-rc.3)

@nx/docker NPM version =23.0.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...

@nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

EUVD-2026-91767

@nx/docker: OS command injection in the @nx/docker release pipeline...

@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)

@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0-beta.4, =21.4.0-beta.4, =21.4.0-beta.4, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...

GHSA-6VC5-VF29-FFR2 @nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

DEBIAN-CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2025-9074

CVE-2025-9074 – 노출된 엔진 API를 통한 Docker Desktop Windows 컨테이너→호스트 쓰기 Author: w01f 상태: 개념 증명 교육 / 승인된 테스트 전용 개요 이 프로젝트는 CVE-2025-9074 에 대한 PoC를 시연합니다. 이 취약점은 Docker Desktop for Windows 의 특정 버전에서 Docker Engine HTTP API 가 http://192.168.65.7:2375에서 컨테이너때로는 SSRF를 통해에서 접근 가능하여 공격자가 바인드 마운트 로 Windows 호스트...

EUVD-2026-92818

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This vulnerability allows an untrusted Bake definition to expose a readable file via a pathless secret (where the ID is interpreted as a client-side pathname) or to consume a local OCI image layout o...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

proof-of-exploit

Proof of Exploit Takes a public security advisory, reproduces...

CVE-2022-25476

CVE-2022-25476 ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 설정 예시: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash ...

CVE-2024-21626-old-docker-versions

오래된 runc 구성요소의 컨테이너 탈출 취약점 CVE-2024-21626 CVE-2024-21626에 대한 분석 중에 다른 오래된 Docker 구성 요소들이 fd 누출 에 취약하다는 것을 발견했습니다 보안 권고 GHSA-xr7r-f8xq-vfvv에는 언급되지 않은 내용입니다. 자세한 설명은 제 전체 글 여기에서 읽을 수 있습니다. 1. 환경 설정 🔨 A. Ubuntu 18.04.6 LTS Bionic Beaver 버전 다운로드 및 설치 설치 중에 업데이트 시스템 다운로드 상자를 체크하지 마세요. B. 취약한 Docker 버전...