{"vulnerability": "cve-2018-18955", "sightings": [{"uuid": "feea6051-7be3-4666-8133-ecccd466ea43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45915", "content": "", "creation_timestamp": "2018-11-29T00:00:00.000000Z"}, {"uuid": "edf81d1b-ee93-4780-9e35-900c0e5e9e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45886", "content": "", "creation_timestamp": "2018-11-16T00:00:00.000000Z"}, {"uuid": "b437a427-9108-4c6a-a011-68846fa1d7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "9942b0a4-fce3-439d-82d5-16eda275db16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:06.000000Z"}, {"uuid": "a7c27add-2733-416f-80bb-4c9491003ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/nested_namespace_idmap_limit_priv_esc.rb", "content": "", "creation_timestamp": "2018-11-27T22:33:29.000000Z"}, {"uuid": "84cf8a7c-b0c2-45ad-9f59-3ccc65497572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "published-proof-of-concept", "source": "https://t.me/antichat/2692", "content": "#linux #exploit #update\n\nLinux Kernel CVE-2018-18955\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 UID/GID, \u043a\u043e\u0433\u0434\u0430 \u0438\u0445 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u044f\u0442\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0440: https://bugs.chromium.org/p/project-zero/issues/detail?id=1712\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 4.15 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 4.18.19 \u0438 4.19.2:\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2", "creation_timestamp": "2018-11-20T07:03:47.000000Z"}, {"uuid": "298e7f94-a67f-45b9-aa4e-49a672ea9e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "published-proof-of-concept", "source": "https://t.me/sysadmin_tools/452", "content": "#linux #exploit #update\n\nLinux Kernel CVE-2018-18955\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 UID/GID, \u043a\u043e\u0433\u0434\u0430 \u0438\u0445 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u044f\u0442\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0440: https://bugs.chromium.org/p/project-zero/issues/detail?id=1712\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 4.15 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 4.18.19 \u0438 4.19.2:\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2", "creation_timestamp": "2026-08-01T19:00:04.075383Z"}, {"uuid": "04bca70e-08ef-481c-b5a2-b9b47b629f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "published-proof-of-concept", "source": "https://t.me/sysadmin_tools/452", "content": "#linux #exploit #update\n\nLinux Kernel CVE-2018-18955\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 UID/GID, \u043a\u043e\u0433\u0434\u0430 \u0438\u0445 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u044f\u0442\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0440: https://bugs.chromium.org/p/project-zero/issues/detail?id=1712\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 4.15 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 4.18.19 \u0438 4.19.2:\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2", "creation_timestamp": "2026-08-02T00:00:23.160906Z"}, {"uuid": "78ba7345-2f76-4cf2-be15-6a1d23fb8572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "https://t.me/sysadmin_tools/452", "content": "#linux #exploit #update\n\nLinux Kernel CVE-2018-18955\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 UID/GID, \u043a\u043e\u0433\u0434\u0430 \u0438\u0445 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u044f\u0442\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0440: https://bugs.chromium.org/p/project-zero/issues/detail?id=1712\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 4.15 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 4.18.19 \u0438 4.19.2:\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2", "creation_timestamp": "2026-07-29T12:01:54.524071Z"}, {"uuid": "fd8e64da-f61b-4146-b836-3db19863c043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "https://t.me/sysadmin_tools/452", "content": "#linux #exploit #update\n\nLinux Kernel CVE-2018-18955\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u044d\u0439\u043c\u0441\u043f\u0435\u0439\u0441\u044b \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 UID/GID, \u043a\u043e\u0433\u0434\u0430 \u0438\u0445 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u044f\u0442\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0440: https://bugs.chromium.org/p/project-zero/issues/detail?id=1712\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 4.15 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 4.18.19 \u0438 4.19.2:\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19\nhttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2", "creation_timestamp": "2026-07-30T00:02:05.848195Z"}, {"uuid": "17d7aad5-7e14-4cbf-9b7c-02dafe58ad02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "https://t.me/hacking_Attack/11444", "content": "container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2016-5195)  \u2705      cve-2018-18955 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2018-18955.yaml)  kernel  privilege_escalation  7.0 (https://nvd.nist.gov/vuln/detail/CVE-2018-18955)  \u2705      cve-2020-14386 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2020-14386.yaml)  kernel  container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-14386)  \u2705      cap_dac_read_search-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_dac_read_search-container.yaml)  config  container_escape  -  \u2705      cap_sys_admin-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_admin-container.yaml)  config  container_escape  -  \u2705      cap_sys_ptrace-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_ptrace-container.yaml)  config  container_escape  -  \u2705      privileged-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/privileged-container.yaml)  config  container_escape  -  \u2705      mount-docker-sock (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-docker-sock.yaml)  mount  container_escape  -  \u2705      mount-host-etc (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-etc.yaml)  mount  container_escape  -  \u2705      mount-host-procfs (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-procfs.yaml)  mount  container_escape  -  \u2705      kata-escape-2020 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kata-containers/kata-escape-2020.yaml)  kata-containers  container_escape  6.3 (https://nvd.nist.gov/vuln/detail/CVE-2020-2023)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2025)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2026)  \u2705      \n4.2 Vulnerable Scenes Related to Cloud Native Applications\n  These scenes are mainly derived from other open-source projects:    Vulhub (https://github.com/vulhub/vulhub)  DVWA (https://github.com/digininja/DVWA)    We express sincere gratitude to projects above!  Metarget converts scenes in projects above to Deployments and Services resources in Kubernetes (thanks to kompose (https://github.com/kubernetes/kompose)).  To list vulnerable scenes related to cloud native applications supported by Metarget, just run\uff1a  ./metarget appv list  \n5 DEMO", "creation_timestamp": "2026-09-01T20:02:38.471088Z"}, {"uuid": "a01c8f98-1fbe-4e92-b1d9-92ed73160b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "https://t.me/hacking_Attack/11444", "content": "container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2016-5195)  \u2705      cve-2018-18955 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2018-18955.yaml)  kernel  privilege_escalation  7.0 (https://nvd.nist.gov/vuln/detail/CVE-2018-18955)  \u2705      cve-2020-14386 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2020-14386.yaml)  kernel  container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-14386)  \u2705      cap_dac_read_search-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_dac_read_search-container.yaml)  config  container_escape  -  \u2705      cap_sys_admin-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_admin-container.yaml)  config  container_escape  -  \u2705      cap_sys_ptrace-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_ptrace-container.yaml)  config  container_escape  -  \u2705      privileged-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/privileged-container.yaml)  config  container_escape  -  \u2705      mount-docker-sock (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-docker-sock.yaml)  mount  container_escape  -  \u2705      mount-host-etc (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-etc.yaml)  mount  container_escape  -  \u2705      mount-host-procfs (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-procfs.yaml)  mount  container_escape  -  \u2705      kata-escape-2020 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kata-containers/kata-escape-2020.yaml)  kata-containers  container_escape  6.3 (https://nvd.nist.gov/vuln/detail/CVE-2020-2023)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2025)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2026)  \u2705      \n4.2 Vulnerable Scenes Related to Cloud Native Applications\n  These scenes are mainly derived from other open-source projects:    Vulhub (https://github.com/vulhub/vulhub)  DVWA (https://github.com/digininja/DVWA)    We express sincere gratitude to projects above!  Metarget converts scenes in projects above to Deployments and Services resources in Kubernetes (thanks to kompose (https://github.com/kubernetes/kompose)).  To list vulnerable scenes related to cloud native applications supported by Metarget, just run\uff1a  ./metarget appv list  \n5 DEMO", "creation_timestamp": "2026-09-02T01:03:14.161925Z"}, {"uuid": "22fb23b2-e836-477d-84a5-79c49af409ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11444", "content": "container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2016-5195)  \u2705      cve-2018-18955 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2018-18955.yaml)  kernel  privilege_escalation  7.0 (https://nvd.nist.gov/vuln/detail/CVE-2018-18955)  \u2705      cve-2020-14386 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2020-14386.yaml)  kernel  container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-14386)  \u2705      cap_dac_read_search-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_dac_read_search-container.yaml)  config  container_escape  -  \u2705      cap_sys_admin-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_admin-container.yaml)  config  container_escape  -  \u2705      cap_sys_ptrace-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_ptrace-container.yaml)  config  container_escape  -  \u2705      privileged-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/privileged-container.yaml)  config  container_escape  -  \u2705      mount-docker-sock (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-docker-sock.yaml)  mount  container_escape  -  \u2705      mount-host-etc (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-etc.yaml)  mount  container_escape  -  \u2705      mount-host-procfs (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-procfs.yaml)  mount  container_escape  -  \u2705      kata-escape-2020 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kata-containers/kata-escape-2020.yaml)  kata-containers  container_escape  6.3 (https://nvd.nist.gov/vuln/detail/CVE-2020-2023)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2025)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2026)  \u2705      \n4.2 Vulnerable Scenes Related to Cloud Native Applications\n  These scenes are mainly derived from other open-source projects:    Vulhub (https://github.com/vulhub/vulhub)  DVWA (https://github.com/digininja/DVWA)    We express sincere gratitude to projects above!  Metarget converts scenes in projects above to Deployments and Services resources in Kubernetes (thanks to kompose (https://github.com/kubernetes/kompose)).  To list vulnerable scenes related to cloud native applications supported by Metarget, just run\uff1a  ./metarget appv list  \n5 DEMO", "creation_timestamp": "2026-09-08T04:00:04.656406Z"}, {"uuid": "f7763cf2-6644-4213-aa63-7565acfacd2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/nested_namespace_idmap_limit_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Jann Horn\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18,\\n          and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user\\n          namespaces and kernel uid/gid mappings allow elevation to root\\n          (CVE-2018-18955).\\n\\n          The target system must have unprivileged user namespaces enabled and\\n          the newuidmap and newgidmap helpers installed (from uidmap package).\\n\\n          This module has been tested successfully on:\\n\\n          Fedora Workstation 28 kernel 4.16.3-301.fc28.x86_64;\\n          Kubuntu 18.04 LTS kernel 4.15.0-20-generic (x86_64);\\n          Linux Mint 19 kernel 4.15.0-20-generic (x86_64);\\n          Ubuntu Linux 18.04.1 LTS kernel 4.15.0-20-generic (x86_64).\", \"disclosure_date\": \"2018-11-15\", \"fullname\": \"exploit/linux/local/nested_namespace_idmap_limit_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2026-05-14 11:43:36 +0000\", \"name\": \"Linux Nested User Namespace idmap Limit Local Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"AKA\": [\"subuid_shell.c\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/nested_namespace_idmap_limit_priv_esc.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/nested_namespace_idmap_limit_priv_esc\", \"references\": [\"BID-105941\", \"CVE-2018-18955\", \"EDB-45886\", \"PACKETSTORM-150381\", \"URL-https://bugs.chromium.org/p/project-zero/issues/detail?id=1712\", \"URL-https://github.com/bcoles/kernel-exploits/tree/master/CVE-2018-18955\", \"URL-https://lwn.net/Articles/532593/\", \"URL-https://bugs.launchpad.net/bugs/1801924\", \"URL-https://people.canonical.com/~ubuntu-security/cve/CVE-2018-18955\", \"URL-https://security-tracker.debian.org/tracker/CVE-2018-18955\", \"URL-https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d2f007dbe7e4c9583eea6eb04d60001e85c6f1bd\", \"URL-https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19\", \"URL-https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:09.745395Z"}, {"uuid": "cebc7464-7897-42cd-9bd4-830ed4a45dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-18955", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11444", "content": "container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2016-5195)  \u2705      cve-2018-18955 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2018-18955.yaml)  kernel  privilege_escalation  7.0 (https://nvd.nist.gov/vuln/detail/CVE-2018-18955)  \u2705      cve-2020-14386 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2020-14386.yaml)  kernel  container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-14386)  \u2705      cap_dac_read_search-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_dac_read_search-container.yaml)  config  container_escape  -  \u2705      cap_sys_admin-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_admin-container.yaml)  config  container_escape  -  \u2705      cap_sys_ptrace-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_ptrace-container.yaml)  config  container_escape  -  \u2705      privileged-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/privileged-container.yaml)  config  container_escape  -  \u2705      mount-docker-sock (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-docker-sock.yaml)  mount  container_escape  -  \u2705      mount-host-etc (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-etc.yaml)  mount  container_escape  -  \u2705      mount-host-procfs (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-procfs.yaml)  mount  container_escape  -  \u2705      kata-escape-2020 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kata-containers/kata-escape-2020.yaml)  kata-containers  container_escape  6.3 (https://nvd.nist.gov/vuln/detail/CVE-2020-2023)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2025)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2026)  \u2705      \n4.2 Vulnerable Scenes Related to Cloud Native Applications\n  These scenes are mainly derived from other open-source projects:    Vulhub (https://github.com/vulhub/vulhub)  DVWA (https://github.com/digininja/DVWA)    We express sincere gratitude to projects above!  Metarget converts scenes in projects above to Deployments and Services resources in Kubernetes (thanks to kompose (https://github.com/kubernetes/kompose)).  To list vulnerable scenes related to cloud native applications supported by Metarget, just run\uff1a  ./metarget appv list  \n5 DEMO", "creation_timestamp": "2026-09-09T00:00:43.775098Z"}]}