CVE-2025-30206: Use of Hard-coded Cryptographic Key

Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw allows attackers ...

This Week in Spring - April 15th, 2025

Spring AI M7 is here! This new release includes a bunch of awesome new features! And some refactorings. Notably that the Spring AI auto-configuration has changed from a single monolithic artifact to individual auto-configuration artifacts per model, vector store, and other components. This change...

Dpanel 安全漏洞

Dpanel is a lightweight Docker visualization management panel open-sourced by Donknap that provides comprehensive container management features. A security vulnerability exists in Dpanel that stems from the inclusion of hardcoded JWT keys in the default configuration, which could lead to host...

Incomplete Patch Leaves NVIDIA and Docker Users at Risk

NVIDIA's incomplete security patch, combined with a Docker vulnerability, creates a serious threat for organizations using containerized environments. This article explains the risks and mitigation strategies...

Important: docker

Issue Overview: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CVE-2025-22868 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or no...

Important: docker

Issue Overview: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CVE-2025-22868 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or no...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

Exploit for Cross-site Scripting in Ourphp

cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-...

OPENSUSE-SU-2025:14985-1 docker-27.5.1_ce-15.1 on GA media

These are all security issues fixed in the docker-27.5.1ce-15.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: yace, dbmate, trino, neuvector-scanner, tailscale, bank-vaults, terraform-provider-azapi, terraform-provider-grafana, buildkitd, grafana-mimir, crane, kaniko, timoni, crossplane-provider-keycloak, spire-server, argo-workflows, kaf, falcosidekick, helm-docs, ctop,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: yace, dbmate, trino, neuvector-scanner, tailscale, bank-vaults, terraform-provider-azapi, terraform-provider-grafana, buildkitd, grafana-mimir, crane, kaniko, timoni, crossplane-provider-keycloak, spire-server, argo-workflows, kaf, falcosidekick, helm-docs, ctop,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, conftest, containerd-fips, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, rabbitmq-messaging-topology-operator-fips, agentbeat-fips, newrelic-nri-statsd, git-sync-fips, bazelisk, conftest-fips,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, conftest, containerd-fips, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, rabbitmq-messaging-topology-operator-fips, agentbeat-fips, newrelic-nri-statsd, git-sync-fips, bazelisk, conftest-fips,...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32755

The jenkins/ssh-slave Docker images based on Debian are vulnerable to an SSH host key reuse issue. This occurs because SSH host keys are generated during image creation, resulting in all containers of the same version sharing identical host keys. This flaw stems from errors in the pseudorandom nu...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...