38 matches found
CVE-2025-9074
CVE-2025-9074: RCE no autenticado en la API de Docker Engine Gravedad : CRรTICA | Puntuaciรณn CVSS : 9.8 estimada | Versiones afectadas : Docker Desktop 4.44.3 Un exploit de prueba de concepto para CVE-2025-9074, una vulnerabilidad de ejecuciรณn remota de cรณdigo no autenticada en la API de Docker...
dd
dd ๅจ macOS ไธ่ฟ่ก Linux ๅฎนๅจโโๆ ้่ๆๆบใ ไปไนๆฏ dd๏ผ dd ๅจ Apple Silicon macOS ไธๅ็่ฟ่ก Linux ๅฎนๅจ๏ผๆ ้่ๆๆบ ใๅฎๅบๅฑๆฒกๆ Linux ๅ ๆ ธ๏ผไนๆฒกๆ่ๆๆบ็ๆง็จๅบ๏ผไธไธช JIT ไผ่ฝฌๆขๅฎนๅจ็ไปฃ็ ๏ผๅนถๅจ็จๆท็ฉบ้ดๅ ๅค็ๅ ถ Linux ็ณป็ป่ฐ็จ ๏ผgVisor / PRoot ไธ่๏ผใJIT ๅฐฑๆฏ ๅฎขๆทๆบ็ Linux ๅ ๆ ธโโๅฝๅ็ฉบ้ดใcgroupใoverlay ้ๅๅฑๅ็ฝ็ป้ฝไปฅ็จๆท็ฉบ้ด็ถๆ็ปดๆคใๅฎๅฎ็ฐไบ Docker Engine API ๏ผๅ ๆญคๆฎ้็ docker CLI ๅณๅฏ้ฉฑๅจๅฎใ ๅฎนๅจ็ ่ฎก็ฎ ไปฅๅ็ Apple...
CVE-2025-9074
CVE-2025-9074 โ Docker Desktop Windows Escritura de Contenedor a Host a travรฉs de la API del Motor Expuesta Autor: w01f Estado: Prueba de Concepto solo con fines educativos / pruebas autorizadas Resumen Este proyecto demuestra una PoC para CVE-2025-9074 , una mala configuraciรณn/exposiciรณn en...
CVE-2025-9074-PoC
Docker API ๆชๆๆ RCE CVE-2025-9074 ไธไธชไธฅ้็ CVE-2025-9074 ๆผๆดๅญๅจไบ Docker Desktop ไธญ๏ผไฝฟๅพๆฌๅฐ่ฟ่ก็ Linux ๅฎนๅจ่ฝๅค้่ฟ้ป่ฎคๅญ็ฝ 192.168.65.7:2375 ่ฟๆฅๅฐ Docker Engine APIใๆ ่ฎบๆฏๅฆๅฏ็จๅขๅผบๅฎนๅจ้็ฆป ECI ๆ TCP ๆด้ฒ่ฎพ็ฝฎ๏ผ่ฏฅ้ฎ้ขไป็ถๅญๅจใ้ๅฏน CVE-2025-9074 ็ๆฆๅฟต้ช่ฏ PoC ๅฉ็จไปฃ็ ๅทฒๅ ฌๅผใ่ฏฅๆผๆดๅฏ่ฝๅฏผ่ดไธปๆบ็ณป็ปไธ็็จๆทๆไปถ่ขซๆช็ปๆๆ่ฎฟ้ฎใๅ ๆญค๏ผ้ฃ้ฉ็ญ็บง่ขซ่ฏๅฎไธบ้ซ้ฃ้ฉใ ไธไธช็ฌ็ซ็ Bash ่ๆฌ๏ผ็จไบๅฉ็จๆช็ป่ฎค่ฏ็ๆด้ฒ Docker API๏ผ้ๅธธไธบ็ซฏๅฃ...
CVE-2025-9074-Poc
RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crรญtica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecuciรณn local se conecten a la API del motor de Docker a travรฉs de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...
CVE-2025-9074-Docker-Desktop-Container-Escape
CVE-2025-9074๏ผDocker Desktop ๅฎนๅจ้้ธ PoC CVE-2025-9074 ็ๆฆๅฟต้ช่ฏๅฉ็จ็จๅบโโDocker Desktop ไธญ็ไธไธชไธฅ้ๅฎนๅจ้้ธๆผๆด๏ผๅ ่ฎธๆชๆๆ่ฎฟ้ฎ Docker Engine APIใ ๆผๆดๆฆ่ฟฐ ๅฑๆง| ๅผ ---|--- CVE ID| CVE-2025-9074 CVSS ่ฏๅ| 9.3๏ผไธฅ้๏ผ ๅๅฝฑๅ่ฝฏไปถ| Docker Desktop 4.44.3 ๅๅฝฑๅๅนณๅฐ| WindowsใmacOS๏ผLinux ไธๅๅฝฑๅ๏ผ ไฟฎๅค็ๆฌ| Docker Desktop 4.44.3+ ๅ็ฐ่ | Felix BouletใPhilippe Dug...
Exploit for CVE-2025-9074
CVE-2025-9074: Docker Engine API Unauthenticated RCE Seve...
PT-2026-43211
Name of the Vulnerable Software and Affected Versions Xibo CMS versions prior to 4.4.2 Description A vulnerability chain involving Stored Cross-Site Scripting XSS and Iframe Sandbox escape exists in the Xibo CMS. Users with DataSet permissions can utilize the Data Connector functionality to craft...
Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID
Summary The hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URLs using fmt.Sprintf with the raw value instead of...
CVE-2026-27734
Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URL...
Docker Desktop 4.44.3 - Unauthenticated API Exposure
Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...
Exploit for CVE-2025-9074
CVE-2025-9074: Docker Desktop Container Escape PoC !CVEhtt...
Exploit for CVE-2025-9074
CVE-2025-9074 - Docker API Unauthenticated Access PoC ๐ Ov...
EUVD-2025-25308
Malicious code in bioql PyPI...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via improper permission checks in the import and export tasks. An attacker can gain unauthorized access to exported data by sending crafted requests to the REST APIs. Remediation Upgrade...
Docker Desktop < 4.44.3 Container Escape
The version of Docker Desktop is prior to 4.44.3. It is therefore affected by a container escape vulnerability. The vulnerability allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with...
CVE-2025-9074
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...
CVE-2025-9074
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...
CVE-2025-9074 Docker Desktop allows unauthenticated access to Docker Engine API from containers
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...
CVE-2025-9074
CVE-2025-9074 : Docker Desktop exposes the Docker Engine API on the internal subnet (example: 192.168.65.7:2375) without authentication, enabling a container to create a privileged container that mounts host filesystem access. Public writeups and exploits in the connected literature demonstrate a...