203 matches found
kata-containers
Kata Containers Kata Containers へようこそ！ このリポジトリは、2.0 以降のリリース向け Kata Containers コードの本拠地です。 Kata Containers について詳しく知りたい場合は、メインの Kata Containers ウェブサイト をご覧ください。 はじめに Kata Containers は、コンテナのように動作し性能を発揮しながら、VM のワークロード分離とセキュリティ上の利点を提供する、軽量仮想マシン（VM）の標準実装を構築することを目指すオープンソースプロジェクトおよびコミュニティです。 ライセンス 本コードは...
lockc
lockc è un software open source per fornire un audit di sicurezza di tipo MAC Mandatory Access Control per i carichi di lavoro containerizzati. Il motivo principale per cui lockc esiste è che i container non contengono. I container non sono sicuri e isolati come le VM. Di default espongono molte...
nanoclaw
Ein KI-Assistent, der Agents sicher in eigenen Containern ausführt. Leichtgewichtig und so konzipiert, dass er leicht verstanden und komplett an Ihre Bedürfnisse angepasst werden kann. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Warum ich NanoClaw gebaut habe OpenClaw ist ein beeindruckendes Projekt...
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability Di Mark Mallia Containerizzazione e il potere dell'automazione La containerizzazione è la spina dorsale della distribuzione moderna delle applicazioni: raggruppa l'intero stack runtime in un'unica immagine immutabile che può essere distribuit...
agentbox
Agentbox - Sandbox per Agent di Codice Non esiste ancora un modo perfetto per isolare gli agent, ma i container sono un inizio pratico. Agentbox è una sandbox per agent di codifica basata su Docker, originariamente ispirata da Batrachian Toad, e ora generalizzata per più strumenti. Fornisce un...
yolobox
root@kitploit: ██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝...
gvisor
Che cos'è gVisor? gVisor fornisce un forte livello di isolamento tra le applicazioni in esecuzione e il sistema operativo host. È un kernel applicativo che implementa un'interfaccia simile a Linux. A differenza di Linux, è scritto in un linguaggio memory-safe Go e gira nello spazio utente...
sysbox
Introduzione Sysbox è un container runtime open-source e gratuito una "runc" specializzata, originariamente sviluppato da Nestybox acquisita da Docker a 05/2022, che potenzia i container in due modi fondamentali: Migliora l'isolamento dei container: User-namespace Linux su tutti i container cioè,...
CVE-2026-62313
Incus (system container and VM manager) prior to 7.3.0 contains a bypass of the project-level restriction restricted.containers.privilege=isolated. The check only rejects an explicitly set security.idmap.isolated=false or empty value, but does not enforce the restriction when the key is omitted e...
CVE-2026-62313 Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...
Linux Distros Unpatched Vulnerability : CVE-2026-63295
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is...
CVE-2026-63295
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
CVE-2026-63295
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
EUVD-2026-57516
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
CVE-2026-63295
CVE-2026-63295 describes an authorization bypass in LXD where project isolation can be defeated if an instance configuration omits the security.idmap.isolated key. An authenticated attacker can create or update an instance without this setting, potentially bypassing restricted.containers.privileg...
CVE-2026-63295 Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
PT-2026-71283
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
CVE-2026-72971
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...