CR1MS0N-Operator/security-research

PoC

Original offensive security research into Linux container boundary weaknesses. Whitepaper 1: OCI hook isolation failures in the NVIDIA Container Toolkit (CVE-2025-23266) under rootless Podman — four-way runc/crun comparison.

view exploit source poc_in_githubauthor CR1MS0N-Operatorpublished 2026-01-10catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-23266US	—	3.32% (89th)	Exploit	2025-07-17
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated per…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan