1133 matches found
loki
Loki: come Prometheus, ma per i log. Loki è un sistema di aggregazione dei log multi-tenant, altamente disponibile e scalabile orizzontalmente, ispirato a Prometheus. È progettato per essere molto conveniente in termini di costi e facile da gestire. Non indicizza il contenuto dei log, ma piuttost...
firecracker
La nostra missione è abilitare l'esecuzione sicura, multi-tenant e con overhead minimo di carichi di lavoro container e funzione. Leggi di più sulla Carta di Firecracker qui. Cos'è Firecracker? Firecracker è una tecnologia di virtualizzazione open source progettata appositamente per creare e...
CVE-2021-1056
CVE-2021-1056 CVE-2021-1056 è una vulnerabilità che ho inviato a NVIDIA PSIRT. Personalmente, potrebbe portare a rischi di sicurezza elevati in cluster HPC multi-tenant, specialmente in piattaforme di machine learning nel cloud. Questo repository dimostra semplicemente la vulnerabilità su contain...
jiopc-architecture-whitepaper
Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...
cloudfoundry_uaa
Server User Account and Authentication UAA di CloudFoundry UAA è un servizio di gestione delle identità multi-tenant, utilizzato in Cloud Foundry, ma disponibile anche come server OAuth2 autonomo. Il suo ruolo principale è quello di provider OAuth2, emettendo token che le applicazioni client...
agentZ
Piattaforma Agentica AI Zero Trust Costruisci, esegui e governa agenti AI. Sicuro per progettazione. Ogni agente viene eseguito all'interno di una sandbox con criterio predefinito di negazione e non riceve mai una credenziale. Ogni azione dell'agente è tracciabile. AgentZ è una piattaforma...
CVE-2026-23552
CVE-2026-23552 - Akzeptanz realmübergreifender Token in camel-keycloak Überblick Die KeycloakSecurityPolicy von Apache Camel validiert den iss-Anspruch Issuer von JWT-Tokens nicht gegen die konfigurierte Realm. Das bedeutet, dass ein Token, das von einer Keycloak-Realm ausgestellt wurde,...
CVE-2025-34159
CVE-2025-34159: Iniezione di Docker Compose in Coolify Panoramica della Vulnerabilità Campo| Valore ---|--- ID CVE| CVE-2025-34159 Interessa| Coolify ≤ v4.0.0-beta.420.6 Corretta in| v4.0.0-beta.420.7 Gravità| Critica CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE|...
EUVD-2026-93506
Payload has a tenant authorization bypass in Multi-Tenant Plugin...
Payload has a tenant authorization bypass in Multi-Tenant Plugin
Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...
GHSA-P96C-XWX8-3CQJ Payload has a tenant authorization bypass in Multi-Tenant Plugin
Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...
GHSA-XHM9-GWGW-3Q2Q @payloadcms/plugin-multi-tenant has a cross-tenant create issue
Impact An authenticated user limited to one tenant could create a record in another tenant. This requires the multi-tenant plugin with at least one tenant-enabled collection. Reads and direct edits to an existing target-tenant document were not bypassed. You are affected if: - You are using...
EUVD-2026-93510
@payloadcms/plugin-multi-tenant has a cross-tenant create issue...
@payloadcms/plugin-multi-tenant has a cross-tenant create issue
Impact An authenticated user limited to one tenant could create a record in another tenant. This requires the multi-tenant plugin with at least one tenant-enabled collection. Reads and direct edits to an existing target-tenant document were not bypassed. You are affected if: - You are using...
POC_CVE-2026-46716
CVE-2026-46716 — RCE cross-tenant in Nezha Monitoring tramite bypass dell'autorizzazione dell'API Cron Un ambiente di laboratorio per riprodurre e rilevare CVE-2026-46716 , una vulnerabilità critica in Nezha Monitoring in cui l'endpoint POST /api/v1/cron non esegue controlli sui privilegi di...
CVE-2026-105864
Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...
CVE-2026-105860
Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants...
CVE-2026-105864 Payload: Cross-tenant create in @payloadcms/plugin-multi-tenant
Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...
CVE-2026-105864
The Payload headless content management system is vulnerable in @payloadcms/plugin-multi-tenant versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 . An authenticated user restricted to a single tenant can exploit an incorrect authorization flaw (CWE-863) to create a record in a d...
CVE-2026-105864 Payload: Cross-tenant create in @payloadcms/plugin-multi-tenant
Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...