yolobox

██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝ ╚═════╝...

agentbox

Agentbox - Coding Agent Sandbox There's no perfect way to sandbox agents yet, but containers are a practical start. Agentbox is a Docker-based coding agent sandbox, originally inspired by Batrachian Toad, and now generalized to more tools. It provides an isolated environment that works well with...

nanoclaw

An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents in Slack: one app per agent Setup provisions each agent its own Slack app: manifest, avatar, and...

onecli

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...

sysbox

Introduction Sysbox is an open-source and free container runtime a specialized "runc", originally developed by Nestybox acquired by Dockerdocker-acquisition on 05/2022, that enhances containers in two key ways: Improves container isolation: Linux user-namespace on all containers i.e., root user i...

EUVD-2026-101107

Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective despite Privileged being forced false. A workflow author able to...

CVE-2026-97810

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-97790

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

CVE-2026-97794

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-97792

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-97787

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-70270

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-102202

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-97810

A heap-based buffer overflow vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked as CVE-2026-97810 with a CVSS 3.1 base score of 7.0 (High) . No specif...

EUVD-2026-100412

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-100357

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-102202

A vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to improper access control . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-59 (Improper Link Resolution Before File Access). No ...

CVE-2026-97792

An improper access control vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource) a...

EUVD-2026-100309

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...