14 matches found
CVE-2019-5736-POC
Escapando de Docker a través de RunC Un código de prueba de concepto para CVE-2019-5736 Este POC está fuertemente basado en el POC de YuvalAvra. No reclamo ningún crédito por el código utilizado en este POC. Se puede encontrar más información sobre esta vulnerabilidad y una demostración de cómo s...
cve-2019-5736-poc
CVE-2019-5736 Prueba de concepto Esto añade una cadena al binario runc del host. Trae tu propio payload ver stage2.c. Para ejecutar: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
EUVD-2024-15934
Malicious code in bioql PyPI...
CVE-2025-34025: Incorrect Permission Assignment for Critical Resource
The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigger remote code execution or direct hos...
CVE-2024-0135
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure,...
CVE-2024-0135
CVE-2024-0135 affects the NVIDIA container-toolkit. The vulnerability is an improper isolation issue in the toolkit that could allow a specially crafted container image to modify a host binary, with potential for code execution, DoS, privilege escalation, information disclosure, and data tamperin...
CVE-2024-0135
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure,...
NVIDIA Container Toolkit 安全漏洞
NVIDIA Container Toolkit is a container toolkit from NVIDIA, Inc. Allows users to build and run GPU-accelerated containers. A security vulnerability exists in NVIDIA Container Toolkit that stems from the inclusion of an incorrect isolation vulnerability, where a specially crafted container image...
PT-2025-1566
Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions are affected, but specific versions are not provided in the input data. Description The issue is related to an improper isolation vulnerability where a specially crafted container image could lead to...
VulnCheck KEV: CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: 1 a new container with an...
UBUNTU-CVE-2019-12499
Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...
CVE-2019-12499
Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...
Updated lxc packages fix security vulnerability
LXC allows attackers to overwrite the host LXC binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: a new container with an attacker-controlled image, or an existing container, to which the attacker...
