12580 matches found
CVE-2024-42364
CVE-2024-42364 – DNS rebinding vulnerability in Homepage 0.9.1. The default, unauthenticated setup of Homepage (0.9.1) can be abused via DNS rebinding to route requests to the internal IP of the Homepage instance, allowing an attacker-controlled site to access sensitive data (e.g., API keys) due ...
CVE-2024-42364 homepage DNS rebinding vulnerability (GHSL-2024-096)
Homepage is a highly customizable homepage with Docker and service API integrations. The default setup of homepage 0.9.1 is vulnerable to DNS rebinding. Homepage is setup without certificate and authentication by default, leaving it to vulnerable to DNS rebinding. In this attack, an attacker will...
Exploit for Improper Encoding or Escaping of Output in Apache Http_Server
CVE-2024-38473 Nuclei Template !imagehttps://github.com/us...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-41937 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2024-41937 Source advisory: OSV:GHSA-W7CP-G8V7-R54M...
GO-2022-0985 Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker...
GO-2022-0919 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings in github.com/pterodactyl/wings
Asymmetric Resource Consumption Amplification in Docker containers created by Wings in github.com/pterodactyl/wings...
GO-2022-0903 Denial-of-Service within Docker container in ktbs.dev/teler
Denial-of-Service within Docker container in ktbs.dev/teler...
GO-2022-0752 Privilege Escalation in Docker in github.com/docker/docker
Privilege Escalation in Docker in github.com/docker/docker...
GO-2022-0649 Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker
Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker...
GO-2022-0751 Path Traversal in Docker in github.com/docker/docker
Path Traversal in Docker in github.com/docker/docker...
GO-2022-0705 Directory Traversal in Docker in github.com/docker/docker
Directory Traversal in Docker in github.com/docker/docker...
GO-2022-0647 Arbitrary File Write in Libcontainer in github.com/docker/docker
Arbitrary File Write in Libcontainer in github.com/docker/docker...
GO-2022-0708 Arbitrary File Override in Docker Engine in github.com/docker/docker
Arbitrary File Override in Docker Engine in github.com/docker/docker...
GO-2022-0625 Access Restriction Bypass in Docker in github.com/docker/docker
Access Restriction Bypass in Docker in github.com/docker/docker...
GO-2022-0630 Arbitrary Code Execution in Docker in github.com/docker/docker
Arbitrary Code Execution in Docker in github.com/docker/docker...
GO-2022-0638 Information Exposure in Docker Engine in github.com/docker/docker
Information Exposure in Docker Engine in github.com/docker/docker...
GO-2022-0636 Man-in-the-Middle (MitM) in github.com/docker/docker
Man-in-the-Middle MitM in github.com/docker/docker...
GO-2022-0418 Opened exploitable ports in default docker-compose.yaml in go-ipfs in github.com/ipfs/go-ipfs
Opened exploitable ports in default docker-compose.yaml in go-ipfs in github.com/ipfs/go-ipfs...
GO-2022-0390 Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker
Moby Docker Engine started with non-empty inheritable Linux process capabilities in github.com/docker/docker...