lempo

Lempo: POrtainer의 LDAP 노출 CVE-2018-19466 | Mauro Eldritch 일명 plaguedoktor root@kitploit: ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD 이 익스플로잇은 제 발표 Hacking Docker with PAZUZU에 대한 보충 자료입니다. 발표 | 날짜| 컨퍼런스| 동영상 링크| 슬라이드 링크 ---|---|---|---|--- 1| NOV-2018| DEVFEST Siberia| TBA|...

CVE-2024-29296

CVE-2024-29296 - Portainer CE 2.19.4의 사용자 열거 Portainer CE 2.19.4에서 사용자 열거 취약점이 발견되었습니다. 이 문제는 사용자 인증 과정에서 발생하며, 응답 시간의 차이로 인해 원격의 인증되지 않은 사용자가 사용자 이름의 유효성을 확인할 수 있습니다. 이 취약점은 Portainer의 이슈 11736에서 수정되었으며, Portainer CE 버전 2.19.5 및 2.20.2에 포함되었습니다. 요약 취약점: 사용자 열거 제품 공급업체: Portainer 영향을 받는 제품 코드 베이스...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer：Docker 插件端点缺少授权 → 主机 RCE CVE-2026-44848 的概念验证（PoC），这是 Portainer 中的一个缺失身份验证（CWE-862）漏洞，允许拥有 Docker 端点访问权限的非管理员 用户执行特权 Docker 插件操作 → 完整的主机 RCE 。 GitHub 安全公告：GHSA-rrmm-9v76-h3p4 · CVSS 9.4（严重）。 根本原因 Portainer 通过按资源处理器代理请求并执行授权检查，在 Docker API 之上实施基于角色的访问控制（RBAC）。Docker 插件管理...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git 심볼릭 링크 → 임의 호스트 파일 읽기 CVE-2026-44881 을 위한 단일 스크립트 익스플로잇입니다. Portainer의 스택 배포 흐름에서 Git 심볼릭 링크 주입 취약점으로, 스택 생성 권한이 있는 모든 낮은 권한의 인증된 사용자가 Portainer 프로세스가 접근 가능한 임의의 파일을 읽을 수 있습니다. 어드바이저리: GHSA-rpgq-m5fp-32wr 영향받는 버전: Portainer CE 2.33.0 – 2.33.7, 2.39.0 – 2.39.1, 2.40....

CVE-2024-29296-PoC

Portainer CVE-2024-29296 개념 증명 스크립트 요구 사항 root@kitploit: python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt usernames.txt에 사용자 이름 추가 사용법 root@kitploit: python3 main.py 대상 URL 입력: 사용자 이름 목록 입력: 크레딧 보고자: https://github.com/ThaySolis/CVE-2024-29296...

GHSA-X626-FCWX-F5PC Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances

Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...

EUVD-2026-42297

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...

ROS-20260818-73-0037

The vulnerability in portainer-ce is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260818-73-0009

The vulnerability in Portainer-Ce is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260818-73-0010

The vulnerability in portainer-ce is related to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260818-73-0011

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-72533

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

EUVD-2026-56003

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533

The CVE concerns Portainer CE (up to 2.44.0) with an authentication bypass in the Docker proxy path validation. Authenticated low-privilege users can bypass proxy authorization checks through non-canonical URL normalization, causing the proxy and authorization layer to interpret crafted requests ...

PT-2026-70108

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

The vulnerability of the Portainer container management platform, related to the improper implementation of authentication algorithms, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...