CVE-2025-9074

CVE-2025-9074 - API Remota de Docker PoC de Laboratorio ⚠️ Aviso legal: Este repositorio es solo para fines educativos y de investigación. No utilice este código fuera de un entorno controlado del que sea propietario. El autor no se hace responsable del mal uso. Descripción general Este repositori...

CVE-2025-9074-POC

CVE-2025-9074-POC Exploit de Prueba de Concepto para CVE-2025-9074 ⚠️ Aviso Legal Este PoC se publica únicamente con fines educativos y de pruebas de seguridad autorizadas. La explotación no autorizada de sistemas es ilegal y poco ética. Utilice este PoC solo en entornos de los que sea propietario...

CVE-2025-9074-Poc

RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecución local se conecten a la API del motor de Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...

CVE-2025-9074

CVE-2025-9074: RCE no autenticado en la API de Docker Engine Gravedad : CRÍTICA | Puntuación CVSS : 9.8 estimada | Versiones afectadas : Docker Desktop 4.44.3 Un exploit de prueba de concepto para CVE-2025-9074, una vulnerabilidad de ejecución remota de código no autenticada en la API de Docker...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Overview This repository provides a Proof-of-Concept PoC exploit for CVE-2025-9074 , which involves unauthenticated exposure of the Docker Engine API on TCP port 2375. An attacker who can access this exposed API can: Interact with the Docker...

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...

EUVD-2016-10035

Malware in sbrugna...

Exploit for CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Ov...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...