SUSE-SU-2026:4535-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

Security update for docker-stable

This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

SUSE-SU-2026:4533-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

React2Shell

React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Estructura del repositorio React2Shell/ ├── browser-extension/ Chrome extension for browser-based detection │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

CVE-2025-49132

CVE-2025-49132 独立漏洞扫描器 非Docker实现 该扫描器直接运行于Python，无需Docker依赖，适用于没有Docker或更倾向不使用Docker的环境。 安装 pip install -r requirements-standalone.txt 手动安装： pip install requests urllib3 用法 1. 单一目标扫描 python standalonescanner.py scan http://localhost/ 2. 从文件进行批量扫描 创建targets.txt： http://localhost/...

OwnCloud-CVE-2023-49103

构建容器的方法： 1: 下载文件夹，解压并构建容器。 2: docker build -t cve-2023-49103 ./ 3: docker run --name cve-2023-49103 -p 80:80 -p 443:443 cve-2023-49103...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

setup-cve-2015-8562

Joomla! 远程代码执行 CVE-2015-8562 用于搭建 CVE-2015-8562 测试环境的 Docker Compose 文件 目录 1. 关于本项目 2. 开始使用 前置条件 安装 3. 用法 4. 贡献 5. 许可证 关于本项目 本项目包含一个 Docker Compose 文件，用于搭建 CVE-2015-8562 的测试环境。 它搭建了一个运行 PHP 5.3 的 Apache 2.4 服务器和一个 MySQL 5.6 服务器。 容器创建后，将显示 Joomla 3.4.4 的安装过程。 本项目还包含一个来自...

cve-2019-5736-poc

CVE-2019-5736 概念验证 该工具会在宿主机 runc 二进制文件末尾追加字符串。需自备有效载荷（参见 stage2.c）。 运行方式： docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

xz-vulnerable-honeypot

xz-vulnerable-honeypot 一个带有 XZ 后门的 SSH 蜜罐。CVE-2024-3094 待办 ：挂钩后门和/或 sshd。记录 rsa 密钥以便解密。 备注： https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504 https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01 https://github.com/hamarituc/xz-backdoor 警告 请在独立隔离的系统上运行此程序。Docker...

Exploite-CVE-2023-30212-vulnerability

创建一个易受 CVE-2023-30212 影响的 Docker 漏洞环境 描述 Docker 环境并利用 CVE-2023-30212 漏洞。CVE-2023-30212 是一个影响 OURPHP 版本小于等于 7.2.0 的安全漏洞。该漏洞允许跨站脚本（XSS）攻击。 OURPHP https://down.chinaz.com/api/index/download?id=51308&type=code 下载 CVE-2023-30212 漏洞利用程序 在保存 dockerfile 的文件夹中打开终端 安装 Docker 机器 sudo apt update sudo apt...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 CVE-2021-41773-Path Traversal ラボの実行方法 1. PC/ラップトップに Docker をインストールして実行する 2. この GitHub リポジトリをクローンする 3. Path Traversal フォルダに移動する 4. 次のコマンドを入力する docker build -t cve-2021-41773-path-traversal . および docker run --rm -dit -p 8888:80 cve-2021-41773-path-traversa...

Kimai-CVE-2026-52824-POC

Kimai CVE-2026-52824 — 默认 APPSECRET 认证绕过 注意： 仓库 URL 中包含了一个过时的 CVE ID（CVE-2026-49865）。本仓库中跟踪的正确且当前的 CVE 是 CVE-2026-52824 （GHSA-jr9p-4h4j-6c58）。 针对 Kimai 时间跟踪（版本 ≤ 2.57.0）中硬编码默认 APPSECRET 漏洞的概念验证利用工具包。允许在未修补的 Docker 部署上通过伪造的 KIMAIREMEMBER cookie 绕过认证。 背景故事 当 CVE-2026-52824 发布时——一个 CVSS 9.1...

Linux Distros Unpatched Vulnerability : CVE-2026-103433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through...

@nx/express (>=23.0.0-beta.0, <=23.1.0), @nx/nest (>=23.0.0-beta.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0-rc.3)

@nx/docker NPM version =23.0.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...

@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)

@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0-beta.4, =21.4.0-beta.4, =21.4.0-beta.4, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...

@nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

EUVD-2026-91767

@nx/docker: OS command injection in the @nx/docker release pipeline...

GHSA-6VC5-VF29-FFR2 @nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...