12191 matches found
DEBIAN-CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2025-9074
CVE-2025-9074 – Docker Desktop Windows Conteneur→Hôte Écriture via API Moteur Exposée Auteur : w01f Statut : Preuve de Concept éducation / tests autorisés uniquement Aperçu Ce projet démontre une PoC pour CVE-2025-9074 , une mauvaise configuration/exposition dans certaines versions de Docker...
CVE-2026-103433
Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This vulnerability allows an untrusted Bake definition to expose a readable file via a pathless secret (where the ID is interpreted as a client-side pathname) or to consume a local OCI image layout o...
CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
EUVD-2026-92818
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
proof-of-exploit
Proof of Exploit Takes a public security advisory, reproduces...
CVE-2022-25476
CVE-2022-25476 ⚡ Utilisation simple Utilisez ce projet uniquement dans des environnements sûrs et autorisés, tels que : Machines virtuelles locales Conteneurs Docker Configurations de laboratoire isolées Environnements de test d'intrusion autorisés Exemple de configuration : git clone cd Project...
CVE-2024-21626-old-docker-versions
Vulnérabilité d'évasion de conteneur dans les anciens composants runc CVE-2024-21626 Lors de mon analyse de CVE-2024-21626, j'ai découvert que d'autres anciens composants Docker sont vulnérables à une fuite de descripteur de fichier non mentionnée dans l'avis de sécurité GHSA-xr7r-f8xq-vfvv. Lise...
tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE
Tugtainer v1.30.2 RCE L'obtention de la RCE se fait en abusant de 2 vulnérabilités CVE-2026-55494 CVE-2026-62308 En bref, une vulnérabilité SSRF est abusée pour appeler un service non authentifié sur le réseau interne afin de créer un docker qui partage le même pid que tugtainer, rendant ainsi le...
CVE-2026-20896
CVE-2026-20896 Официальный Docker-образ Gitea до версии 1.26.2 включительно поставляется со значением REVERSEPROXYTRUSTEDPROXIES = в конфигурации по умолчанию. Если вы включите вход через обратный прокси, этот wildcard означает, что каждый исходный IP-адрес рассматривается как доверенный прокси,...
cve-2022-42889-text4shell-docker
Installer maven - maven-linux 1. Installation de Maven pour créer le jar complet mvn clean install 2. Construction Docker docker build --tag=text4shell . 3. Exécution Docker docker run -p 80:8080 text4shell 4. Tester l'application http://localhost/text4shell/attack?search= 5. L'attaque peut être...
Log4Shell-CVE-2021-44228-Demo
Démo Log4Shell CVE-2021-44228 Configuration de l'environnement Client N'importe où avec la capacité d'accéder au serveur HTTP via la ligne de commande curl Application vulnérable via le serveur HTTP avec log4j Instance EC2 Amazon Linux 2 basé sur x86 / Machine virtuelle CentOS Azure $ yum install...
CVE-2022-0944
CVE-2022-0944 Un exploit de preuve de concept pour SQLPad RCE CVE-2022-0944 Utilisation usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional...
CVE-2022-0492-Container-Escape
CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Implémenté en Go Liens de référence : https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...
AZL-106746 CVE-2026-93323 affecting package docker-buildx 0.14.0-17
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...