CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell Un leggero script bash senza dipendenze che ti fornisce una shell interattiva emulata all'interno di un container Docker — usando solo curl, dd, od e awk. Nessun Python, nessun jq, nessun editor richiesto. Realizzato per ambienti in cui hai solo accesso shell grezzo e devi eseguire...

CVE-2025-9074-Poc

Docker API अप्रमाणित RCE CVE-2025-9074 Docker Desktop में एक गंभीर CVE-2025-9074 कमजोरी स्थानीय रूप से चलने वाले Linux कंटेनरों को डिफ़ॉल्ट सबनेट 192.168.65.7:2375 के माध्यम से Docker Engine API से जुड़ने में सक्षम बनाती है। यह समस्या एन्हांस्ड कंटेनर आइसोलेशन ECI या TCP एक्सपोज़र सेटिंग्स की परव...

CVE-2025-9074

CVE-2025-9074: Docker Engine API 未授权远程代码执行 严重性 ：严重 | CVSS评分 ：9.8（估计） | 受影响版本 ：Docker Desktop options 选项 模式：命令执行 在目标上执行单个命令： root@kitploit: 简单命令 php poc.php -u http://192.168.65.7:2375 -m cmd -c "id" 从主机读...

CVE-2025-9074-POC

CVE-2025-9074-POC Exploit de Prova de Conceito para CVE-2025-9074 ⚠️ Aviso Legal Este PoC é divulgado apenas para fins educacionais e de teste de segurança autorizados. A exploração não autorizada de sistemas é ilegal e antiética. Use este PoC apenas em ambientes que você possua ou tenha permissão...

CVE-2025-9074

CVE-2025-9074 - Docker Remote API PoC di Laboratorio ⚠️ Avvertenza: Questo repository è destinato esclusivamente a scopi educativi e di ricerca. Non utilizzare questo codice al di fuori di un ambiente controllato di tua proprietà. L'autore non è responsabile per eventuali usi impropri. Panoramica...

PoC-for-CVE-2025-9074

CVE-2025-9074 - PoC für nicht authentifizierten Zugriff auf die Docker-API 📌 Übersicht Dieses Repository stellt einen Proof-of-Concept-Exploit PoC für CVE-2025-9074 bereit, der die nicht authentifizierte Offenlegung der Docker-Engine-API auf TCP-Port 2375 betrifft. Ein Angreifer, der auf diese...

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure Date: 2025-10-06 Exploit Author: OilSeller2001 Vendor Homepage: https://www.docker.com/ Software Link: https://www.docker.com/products/docker-desktop/ Version: Affected on Windows and macOS versions prior to 4.44.3 Tested on:...

EUVD-2016-10035

Malware in sbrugna...

Exploit for CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Ov...

CVE-2025-9074

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...