CVE-2019-5736

Использование Измените HOST внутри payload.c, скомпилируйте с помощью make. Запустите nc и выполните pwn.sh внутри контейнера. Примечания Этот эксплойт разрушителен: он перезапишет бинарный файл /usr/bin/docker-runc на хосте полезной нагрузкой. Он также перезапишет /bin/sh внутри контейнера...

PYSEC-2026-2084

Apache Airflow's Google provider operators GCSToSFTPOperator and GCSTimeSpanFileTransformOperator joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket...

SUSE CVE-2019-18466

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a...