A critical vulnerability in the Dockhand Docker management application allowed unauthenticated attackers to execute commands inside containers via a WebSocket endpoint.
A critical flaw in Dockhand versions prior to 1.0.45 lets attackers reset passwords and seize accounts by exploiting a static-asset authentication bypass.