CVE-2025-9074-Docker-Desktop-Container-Escape

CVE-2025-9074: Proof of Concept di Fuga dal Contenitore di Docker Desktop Exploit Proof of Concept per CVE-2025-9074 - una vulnerabilità critica di fuga dal contenitore in Docker Desktop che consente l'accesso non autenticato all'API del motore Docker. Panoramica della Vulnerabilità Proprietà|...

dd

dd Esegui container Linux su macOS — senza VM. Cos'è dd? dd esegue container Linux in modo nativo su macOS con Apple Silicon senza una macchina virtuale. Non c'è kernel Linux né hypervisor sottostante: un JIT traduce il codice del container e gestisce le sue chiamate di sistema Linux nello spazio...

CVE-2025-9074

CVE-2025-9074: Docker Engine API RCE non autenticata Gravità : CRITICA | Punteggio CVSS : 9.8 stimato | Versioni interessate : Docker Desktop 4.44.3 Una proof-of-concept per CVE-2025-9074, una vulnerabilità di Remote Code Execution non autenticata nell'API di Docker Engine che consente l'escape d...

CVE-2025-9074-Poc

Docker API RCE non autenticata CVE-2025-9074 Una vulnerabilità critica CVE-2025-9074 in Docker Desktop consente ai contenitori Linux in esecuzione locale di connettersi all'API Docker Engine tramite la sottorete predefinita 192.168.65.7:2375. Il problema persiste indipendentemente dalle...

CVE-2025-9074

CVE-2025-9074 – Docker Desktop Windows Scrittura da Container a Host tramite API del Motore Esposta Autore: w01f Stato: Proof-of-Concept solo a scopo educativo / test autorizzati Panoramica Questo progetto dimostra un PoC per CVE-2025-9074 , una configurazione errata/esposizione in alcune version...

CVE-2025-9074-PoC

Docker API – Nicht authentifizierte RCE CVE-2025-9074 Eine kritische Sicherheitslücke CVE-2025-9074 in Docker Desktop ermöglicht lokal laufenden Linux-Containern, eine Verbindung zur Docker Engine API über das Standard-Subnetz 192.168.65.7:2375 herzustellen. Das Problem besteht unabhängig von...

Exploit for CVE-2025-9074

CVE-2025-9074: Docker Engine API Unauthenticated RCE Seve...

PT-2026-43211

Name of the Vulnerable Software and Affected Versions Xibo CMS versions prior to 4.4.2 Description A vulnerability chain involving Stored Cross-Site Scripting XSS and Iframe Sandbox escape exists in the Xibo CMS. Users with DataSet permissions can utilize the Data Connector functionality to craft...

Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID

Summary The hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URLs using fmt.Sprintf with the raw value instead of...

CVE-2026-27734

Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URL...

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...

Exploit for CVE-2025-9074

CVE-2025-9074: Docker Desktop Container Escape PoC !CVEhtt...

Exploit for CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Ov...

EUVD-2025-25308

Malicious code in bioql PyPI...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via improper permission checks in the import and export tasks. An attacker can gain unauthorized access to exported data by sending crafted requests to the REST APIs. Remediation Upgrade...

Docker Desktop < 4.44.3 Container Escape

The version of Docker Desktop is prior to 4.44.3. It is therefore affected by a container escape vulnerability. The vulnerability allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

CVE-2025-9074 Docker Desktop allows unauthenticated access to Docker Engine API from containers

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

CVE-2025-9074

CVE-2025-9074 : Docker Desktop exposes the Docker Engine API on the internal subnet (example: 192.168.65.7:2375) without authentication, enabling a container to create a privileged container that mounts host filesystem access. Public writeups and exploits in the connected literature demonstrate a...