10990 matches found
cve-2022-0778
cve-2022-0778 bad server root@kitploit: go run server/main.go --addr 127.0.0.1:12345 cd test && testserver.sh docker stat bad client root@kitploit: cd test && testclient.sh go run client/main.go --network tcp --addr 127.0.0.1:12345 docker stat build root@kitploit: docker build -t cve-2022-0778...
CVE-2019-5736-PoC-2
Overview The exploit from the following repository adapted to run in a Docker image. https://github.com/feexd/pocs Usage Building the Image root@kitploit: $ git clone https://github.com/k-onishi/CVE-2019-5736-PoC $ cd CVE-2019-5736-PoC $ make $ sudo docker build -t poc . Execution Run the contain...
POC-CVE-2026-23520
CVE-2026-23520 — Arcane Lifecycle Label RCE OS Command Injection in Arcane Docker Management 1.13.0 Overview Arcane is a modern, web-based Docker management platform. Versions prior to 1.13.0 are vulnerable to an authenticated Remote Code Execution RCE via OS command injection in the updater...
CVE-2026-50055
cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...
log4jtest
Introduction This repository is setup to quickly test the log4j vulnerability using Docker and Hashicorp Terraform. All of the components of this test will run in Docker containers on the Docker network, accessible via 'host.docker.internal'. Credits / Disclaimer This test environment is derived...
CVE-2021-41773
CVE-2021-41773 Docker root@kitploit: $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart To access docker container for custom config file root@kitploit: $ docker exec -it /bin/bash file config in...
CVE-2025-68613-n8n-lab
CVE-2025-68613 Local n8n Lab This repository provides a simple Docker Compose setup that runs a vulnerable n8n instance for local testing of CVE-2025-68613. Requirements Docker Desktop or Docker Engine Docker Compose v2 Quick start 1. Start the container: root@kitploit: docker compose up -d 2. Op...
cve-2024-41110-checker
CVE-2024-41110 Docker Security Checker This tool is designed to check multiple hosts for vulnerabilities related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable Docker versions and the use of AuthZ plugins, which can potentially lead to security issues. Features...
cve-2022-24112
Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Let's clone using gitclone this repository, then we can navigate to apisix-docker/examples. In this docker-compose.yml file, we already change into image: apache/apisix:2.12.0-alpine, because the vulnerability in this version, then let's...
CVE-2021-43798
Subir o lab docker compose up -d Poc: python3 CVE-2021-43798.py IP PORT By: https://www.linkedin.com/in/steven-guimaraes-29aa79212/...
cve-2023-30212
cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-30212 Environment Setup and PoC Report 📌 Overview This report details the direct construction of a Docker-based vulnerable web environment for CVE-2023-30212, a vulnerability not present in Vulhub, and demonstrates the vulnerability...
docker-cve-2022-39253-poc
docker host file read using cve-2022-39253 poc PoC reproduce environment root@kitploit: $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starti...
CVE-2019-5736-Dockerattack-and-security-mechanism
CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...
CVE-2023-7028
CVE-2023-7028lab Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week. This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the...
exploit-CVE-2014-6271
exploit-CVE-2014-6271 docker run --rm -d -p :80 vulnerables/cve-2014-6271 sh exploit-cli.sh...
heartbleed-poc
HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...
xpdf-docker
Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...
CVE-2026-79994
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...