CVE-2019-5736

Utilisation Modifiez HOST dans payload.c, compilez avec make. Lancez nc et exécutez pwn.sh à l'intérieur du conteneur. Remarques Cet exploit est destructeur : il écrasera le binaire /usr/bin/docker-runc sur l'hôte avec la charge utile. Il écrasera également /bin/sh à l'intérieur du conteneur. Tes...

PYSEC-2026-2084

Apache Airflow's Google provider operators GCSToSFTPOperator and GCSTimeSpanFileTransformOperator joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket...

SUSE CVE-2019-18466

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a...