POC-CVE-2019-5736

RunC-CVE-2019-5736 视频 : https://bit.ly/2WqvILb 博文 : www.idealhax.blogspot.com/2020/05/breaking-out-of-docker-via-runc.html 这里我想提一下，这个漏洞利用的原始开发者是Twistlock实验室的Yuval Avrahami。 运行POC 请注意，运行POC会覆盖主机上的runC二进制文件。 强烈建议你在运行POC之前备份你的runC二进制文件（通常位于/usr/sbin/runc）。 克隆仓库： root@kitploit: $ git clone...

scan-cve-2018-8115

root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Docker 镜像验证器 CLI 工具 CVE-2018-8115 为了帮助社区保持安全，我们 Aqua 创建了一个开源工具， 用于测试镜像是否免受此漏洞的影响。 此工具将连接到 Docker Registry（目前仅支持 Docker...

Arelle < 2.39.10 - Remote Code Execution

Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the webserver's /rest/configure endpoint. The plugins query parameter is forwarded to the plugin manager without authentication, allowing an attacker to supply a URL to a remote Python file that Arelle...

MAL-2026-16089 Malicious code in raydium-clmm-sdk (npm)

raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...

CVE-2026-50093

A vulnerability has been identified in Siveillance Control Pro V3.0 All versions V3.0.12.2173, Siveillance Control Pro V4.0 All versions V4.0.9.2178, Siveillance Control V3.0 All versions V3.0.22.2177, Siveillance Control V4.0 All versions V4.0.11.2177. A vulnerability in the OIS web module allow...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API 未授权访问 PoC 📌 概述 本仓库提供了针对 CVE-2025-9074 的 PoC 漏洞利用代码，该漏洞涉及 Docker Engine API 在 TCP 端口 2375 上的未授权暴露。 能够访问此暴露 API 的攻击者可以： 在无需认证的情况下与 Docker 守护进程交互。 拉取任意镜像。 创建并运行使用 绑定挂载主机文件系统 的容器，从而导致主机被攻陷。 ⚠️ 法律免责声明 本 PoC 发布仅用于教育和授权的安全测试 。 未经授权利用系统是非法的、不道德的。 请仅在您拥有 或有明确许可 测试的环境中使用此 PoC。 🧪...

MAL-2026-15873 Malicious code in btree-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c50a02e5bbe5a57f622112bba7f7b01becd6cf85f6d9d4b8301699f4334b7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-79755

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

MAL-2026-15846 Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-73716

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73701

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

EUVD-2026-69579

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

CVE-2026-73701 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

Malicious code in @yane88/workbuddy-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1067553b82d11f9e2a38c4d59dd3b450f722d5572fc8bb43765d5093f68cc23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @yane88/workbuddy-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbb87f4a9b5e5482d4c8fdc2c448905f4a4df65feb64c3100385c616cf5470a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

PT-2026-84429

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A local privilege-escalation issue exists that allows a local attacker to execute arbitrary code with root privileges. This could result in a complete compromise of the...

PT-2026-84420

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A remote code execution issue exists in the underlying operating system of the software. This flaw allows an unauthenticated remote attacker to execute arbitrary comman...

MAL-2026-15644 Malicious code in @pipi596888/ccursor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ec8f5306971a2465653457f2ef36e6dbf14a666d9d8abff92af034fe5cef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvdy7nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8345a33d68a541bbd486d2095eda3279011cc8dbc69d8dafcbef98551eedc4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfywqmz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee0944700e8c39b5f5fbb125caf69265d316217a2edd6163e038a0c895951d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...