
fastgpt-sandbox-audit
FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)

FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)

Exploit for the CVE-2019-5736 runc vulnerability

Docker Container Escape POC via mlx-metal importlib

Docker Model Runner container-to-host RCE / Escape: A critical vulnerability that allows for container-to-host code execution in the Docker Model…


CVE-2026-31413: BPF verifier soundness bug - container escape

CVE-2025-23266 – Fully Weaponized NVIDIA Container Toolkit Exploit

Working exploit for CVE-2024-21626, a runC/Docker container escape via working directory symlink attack, enabling host filesystem access.

Exploits CVE-2026-41567 Docker escape using trojanized xz/unpigz binaries to gain a root shell on the host from inside a container.

Docker Container-to-Host Remote Code Execution POC via vllm-metal trust_remote_code=True

PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to…

A script for exploiting CVE-2022-1227

Proof of Concept of an unsafe pickle deserialization vulnerability in Socket.IO

cve-2025-23266-migration-bypass

Exploit CVE-2025-1974 with a single file.

* React2Shell-CVE-2025-55182

Proof-of-concept exploit for CVE-2022-25365, a privilege escalation vulnerability in Docker Desktop for Windows via named pipe impersonation.

Este script es para uso educativo y en entornos autorizados como HackTheBox. El uso contra sistemas sin permiso explícito es ilegal.