lxd_root

通过 LXD 实现 Linux 特权提升 概述 Linux 系统上本地 lxd 组的成员有多种途径将其权限提升至 root。本仓库包含全自动本地 root 利用示例。漏洞的详细解释及利用演练可在我的博客 此处 找到。 以下利用并非容器逃逸，而是 利用 容器并 针对 宿主操作系统的本地 root 利用。成功利用需要宿主环境的低权限访问。 我相信我在第二个版本中的策略是独特的，并且足够有趣（至少对我来说）以至于在以上链接的博客中写了详细解释。 lxdrootv1.sh 将宿主机的 / 文件系统挂载到容器中，在容器内宿主机的低权限用户具有 root 访问权限。此 root...

EUVD-2025-206241

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, a Remote Code Execution RCEvulnerability exists in Coolify's application deployment workflow. This flaw allows a low-privileged member to inject arbitrary Docker...

CVE-2025-59156 Coolify has Docker Compose Injection issue

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, a Remote Code Execution RCEvulnerability exists in Coolify's application deployment workflow. This flaw allows a low-privileged member to inject arbitrary Docker...

Exploit for CVE-2025-9074

CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...