459 matches found
lempo
Lempo: LDAP Exposure on POrtainer CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD This exploit is a complement to my talk Hacking Docker with PAZUZU. Presentations | Date| Conference| Link to Video| Link to Slides ---|---|---|---|--- 1| NOV-2018|...
CVE-2024-29296-PoC
Portainer CVE-2024-29296 Proof of Concept Script Requirements python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Usage python3 main.py Enter Target URL: Enter Username List: Credits Reported by: https://github.com/ThaySolis/CVE-2024-29296...
CVE-2024-29296
CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...
CVE-2026-44881_exploit
CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...
CVE-2026-44848-PoC
CVE-2026-44848 — Portainer: Missing Authorization on Docker Plugin Endpoints → Host RCE Proof-of-concept for CVE-2026-44848 , a missing-authentication CWE-862 vulnerability in Portainer that lets a non-admin user with Docker endpoint access perform privileged Docker plugin operations → full host...
portainer-cve-2026-44848-checker
Portainer CVE-2026-44848 checker Non-destructive checker for CVE-2026-44848 / GHSA-rrmm-9v76-h3p4 : missing authorization on Portainer's Docker plugin proxy endpoints. The tool answers two questions: 1. Is the Portainer version in a published affected range? 2. Can a non-admin account with Docker...
Portainer 2.40.x Docker Plugin Authorization Bypass Checker
Portainer versions 2.33.0 through 2.33.7, 2.39.0 through 2.39.1, and 2.40.0 through 2.40.x contain a missing authorization issue in Docker plugin proxy endpoints. This checker performs version detection and a non-destructive authorization probe...
Exploit for Missing Authorization in Portainer
Portainer CVE-2026-44848 checker Non-destructive checker for...
ROS-20261022-73-0066
The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
GO-2026-6619 Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer
Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer...
PT-2026-105616
Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer...
ROS-20260921-73-0115
The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...
SUSE CVE-2026-55761
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. In versions 2.39.0 through 2.39.3 and 2.40.0 until 2.43.0, unauthenticated restore and administrator initialization...
GO-2026-6324 Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances in github.com/portainer/portainer
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances in github.com/portainer/portainer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...
GHSA-X626-FCWX-F5PC Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...
EUVD-2026-42297
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...
Exploit for Missing Authorization in Portainer
CVE-2026-44848 — Portainer: Missing Authorization on Docker Pl...