Lucene search
+L

1133 matches found

Kitploit
Kitploit
•added 2026/10/11 12:28 a.m.•32 views

loki

Loki: come Prometheus, ma per i log. Loki è un sistema di aggregazione dei log multi-tenant, altamente disponibile e scalabile orizzontalmente, ispirato a Prometheus. È progettato per essere molto conveniente in termini di costi e facile da gestire. Non indicizza il contenuto dei log, ma piuttost...

5.8AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/10/10 11:14 p.m.•19 views

firecracker

La nostra missione è abilitare l'esecuzione sicura, multi-tenant e con overhead minimo di carichi di lavoro container e funzione. Leggi di più sulla Carta di Firecracker qui. Cos'è Firecracker? Firecracker è una tecnologia di virtualizzazione open source progettata appositamente per creare e...

6.1AI score
SaveExploits0References21
Kitploit
Kitploit
•added 2026/10/09 8:37 p.m.•17 views

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 è una vulnerabilità che ho inviato a NVIDIA PSIRT. Personalmente, potrebbe portare a rischi di sicurezza elevati in cluster HPC multi-tenant, specialmente in piattaforme di machine learning nel cloud. Questo repository dimostra semplicemente la vulnerabilità su contain...

7.1CVSS7.2AI score0.01708EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/09 7:40 p.m.•27 views

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/09 4:24 a.m.•20 views

cloudfoundry_uaa

Server User Account and Authentication UAA di CloudFoundry UAA è un servizio di gestione delle identità multi-tenant, utilizzato in Cloud Foundry, ma disponibile anche come server OAuth2 autonomo. Il suo ruolo principale è quello di provider OAuth2, emettendo token che le applicazioni client...

6.3AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/08 7:32 p.m.•23 views

agentZ

Piattaforma Agentica AI Zero Trust Costruisci, esegui e governa agenti AI. Sicuro per progettazione. Ogni agente viene eseguito all'interno di una sandbox con criterio predefinito di negazione e non riceve mai una credenziale. Ogni azione dell'agente è tracciabile. AgentZ è una piattaforma...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/08 4:12 p.m.•19 views

CVE-2026-23552

CVE-2026-23552 - Akzeptanz realmübergreifender Token in camel-keycloak Überblick Die KeycloakSecurityPolicy von Apache Camel validiert den iss-Anspruch Issuer von JWT-Tokens nicht gegen die konfigurierte Realm. Das bedeutet, dass ein Token, das von einer Keycloak-Realm ausgestellt wurde,...

9.1CVSS6.2AI score0.00593EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/08 2:07 p.m.•18 views

CVE-2025-34159

CVE-2025-34159: Iniezione di Docker Compose in Coolify Panoramica della Vulnerabilità Campo| Valore ---|--- ID CVE| CVE-2025-34159 Interessa| Coolify ≤ v4.0.0-beta.420.6 Corretta in| v4.0.0-beta.420.7 Gravità| Critica CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE|...

9.4CVSS6.3AI score0.00964EPSS
SaveExploits2References2
EUVD
EUVD
•added 2026/10/07 8:29 p.m.•13 views

EUVD-2026-93506

Payload has a tenant authorization bypass in Multi-Tenant Plugin...

7.1CVSS5.8AI score0.00238EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/10/07 8:29 p.m.•9 views

Payload has a tenant authorization bypass in Multi-Tenant Plugin

Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...

7.1CVSS5.9AI score0.00238EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/10/07 8:29 p.m.•7 views

GHSA-P96C-XWX8-3CQJ Payload has a tenant authorization bypass in Multi-Tenant Plugin

Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...

7.1CVSS5.9AI score0.00238EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/07 8:29 p.m.•9 views

GHSA-XHM9-GWGW-3Q2Q @payloadcms/plugin-multi-tenant has a cross-tenant create issue

Impact An authenticated user limited to one tenant could create a record in another tenant. This requires the multi-tenant plugin with at least one tenant-enabled collection. Reads and direct edits to an existing target-tenant document were not bypassed. You are affected if: - You are using...

5.3CVSS5.8AI score0.00253EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/07 8:29 p.m.•11 views

EUVD-2026-93510

@payloadcms/plugin-multi-tenant has a cross-tenant create issue...

5.3CVSS5.8AI score0.00253EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/10/07 8:29 p.m.•12 views

@payloadcms/plugin-multi-tenant has a cross-tenant create issue

Impact An authenticated user limited to one tenant could create a record in another tenant. This requires the multi-tenant plugin with at least one tenant-enabled collection. Reads and direct edits to an existing target-tenant document were not bypassed. You are affected if: - You are using...

5.3CVSS5.8AI score0.00253EPSS
SaveExploits0References5Affected Software1
Kitploit
Kitploit
•added 2026/10/06 6:05 p.m.•17 views

POC_CVE-2026-46716

CVE-2026-46716 — RCE cross-tenant in Nezha Monitoring tramite bypass dell'autorizzazione dell'API Cron Un ambiente di laboratorio per riprodurre e rilevare CVE-2026-46716 , una vulnerabilità critica in Nezha Monitoring in cui l'endpoint POST /api/v1/cron non esegue controlli sui privilegi di...

9.9CVSS8.4AI score0.00491EPSS
SaveExploits1References2
NVD
NVD
•added 2026/10/06 5:17 p.m.•15 views

CVE-2026-105864

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...

5.3CVSS0.00253EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/06 5:17 p.m.•14 views

CVE-2026-105860

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants...

7.1CVSS0.00238EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/06 4:42 p.m.•12 views

CVE-2026-105864 Payload: Cross-tenant create in @payloadcms/plugin-multi-tenant

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...

5.3CVSS5.8AI score0.00253EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/06 4:42 p.m.•15 views

CVE-2026-105864

The Payload headless content management system is vulnerable in @payloadcms/plugin-multi-tenant versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 . An authenticated user restricted to a single tenant can exploit an incorrect authorization flaw (CWE-863) to create a record in a d...

5.3CVSS5.8AI score0.00253EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/06 4:42 p.m.•45 views

CVE-2026-105864 Payload: Cross-tenant create in @payloadcms/plugin-multi-tenant

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...

5.3CVSS0.00253EPSS
SaveExploits0References3
Rows per page
Query Builder