dwn

🥽 dwn dockerpwn - a docker attack tool manager introduction dwn is a "docker-compose for hackers". Using a simple YAML "plan" format similar to docker-compose, image names, versions and volume / port mappings are defined to setup a tool for use. features With dwn you can: Configure common pentest...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS 로컬 권한 상승 설명 "overlayfs 파일 시스템에서 우분투 특정 문제로, 리눅스 커널이 사용자 네임스페이스와 관련된 파일 시스템 기능 적용을 제대로 검증하지 않았습니다. 로컬 공격자가 이를 이용해 권한을 상승시킬 수 있으며, 이는 우분투에서 비특권 overlayfs 마운트를 허용하기 위해 적용된 패치 때문입니다." - Ubuntu 보안 Linux 5.11에서 수정됨 영향을 받는 버전 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 LTS...

CVE-2026-89839

CVE-2026-89839 affects the f2fs filesystem in the Linux kernel. The function f2fs_xattr_advise_set() calls inode_owner_or_capable() with &nop_mnt_idmap instead of the idmap that the VFS passes to the ->set() handler when checking ownership for the "system.advise" xattr . On idmapped mounts , t...

EUVD-2026-80439

In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fsxattradviseset f2fsxattradviseset calls inodeownerorcapable with &nopmntidmap before allowing the "system.advise" xattr to be set, instead of the idmap that the VFS passes to t...

Linux Distros Unpatched Vulnerability : CVE-2026-89839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: use the mount idmap for the owner check in f2fsxattradviseset f2fsxattradviseset calls inodeownerorcapable with &nopmntidmap before allowing the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: unshare: fixed the handling of unsharefs There’s an unpleasant corner case in unshare2: when CLONENEWNS is used in the flags, and current-fs hasn’t been shared at all; in that case, copymntns passes current-fs instead of a privat...

Astra Linux – Vulnerability in runc-app

Runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, as well as 1.3.0-rc.1 through 1.3.1, and 1.4.0-rc.1 and 1.4.0-rc.2, runc did not perform sufficient verification to ensure that the source of the bind-mount i.e., the container’...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API 未認証アクセス PoC 📌 概要 このリポジトリは、TCP ポート 2375 における Docker Engine API の未認証公開に関するCVE-2025-9074 の概念実証（PoC）エクスプロイトを提供します。 この公開された API にアクセスできる攻撃者は、以下のことが可能です: 認証なしで Docker デーモンと対話する。 任意のイメージをプルする。 ホストファイルシステムへのバインドマウント を備えたコンテナを作成・実行し、ホストを侵害する。 ⚠️ 法的免責事項 この PoC...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS 로컬 권한 상승 영향 받는 버전 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM 사용법 gcc exploit.c -o exploit chmod +x exploit ./exploit 설명 "리눅스 커널의 overlayfs 파일 시스템에서 사용자 네임스페이스와 관련하여 파일 시스템 기능 적용을 제대로 검증하지 않은 Ubuntu 특정 문제입니다. 로컬 공격자가 Ubuntu에서 무권한...

CVE-2026-89768

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

CVE-2026-89768

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

CVE-2026-86114

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

CVE-2026-86114 Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

UBUNTU-CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

Linux Distros Unpatched Vulnerability : CVE-2026-78410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: dropping peer group IDs under namespace lock When cleaning up peer group IDs in the failure path, we need to ensure that the namespace lock is retained. Otherwise, another thread might simultaneously change the mount status...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagatemnt function handles mount propagation when creating mounts and propagates the source mount tree @sourcemnt to all applicable nodes of the destination propagation mount tree, heade...

Astra Linux – Vulnerability in runc-app

Runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2, and 1.4.0-rc.2, an attacker can trick runc into redirecting write operations to /proc to other procfs files by using a racing container with shared mounts. We have also verified th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fixed the null-ptr-deref read operation in txBegin. Syzkaller reported a issue where txBegin might be called on a superblock within a read-only mounted file system, leading to a NULL pointer dereference. This issue can b...