
CVE-2026-5843
Docker Container Escape POC via mlx-metal importlib

Docker Container Escape POC via mlx-metal importlib

一个容器逃逸漏洞POC

Modified version of CVE-2019-5736-PoC by Frichetten

In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it.

Analyzes and exploits a container escape vulnerability in legacy Docker/runc versions, demonstrating fd leakage to access the host filesystem, with…

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

Container escape on any docker container with healthcheck enabled via CVE-2026-31431

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

Copy Fail (CVE-2026-31431) LPE exploit. A clean, multi-arch Python reimplementation targeting the Linux kernel AF_ALG page cache vulnerability.

Detector + PoC for Linux page-cache write vulnerabilities: Copy Fail (CVE-2026-31431) and Dirty Frag (CVE-2026-43284/43500). Authorized security…

Proof-of-concept exploit for CVE-2026-31431 (Copy Fail), a Linux kernel LPE via algif_aead page-cache corruption, with detection, lab, and mitigation…