CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

firecracker

Наша миссия — обеспечить безопасное, мультитенантное выполнение контейнерных и функциональных рабочих нагрузок с минимальными накладными расходами. Подробнее о Хартии Firecracker читайте здесь. Что такое Firecracker? Firecracker — это технология виртуализации с открытым исходным кодом, специально...

loki

Loki: как Prometheus, но для логов. Loki — это горизонтально масштабируемая, высокодоступная, мультитенантная система агрегации логов, вдохновлённая Prometheus. Она спроектирована так, чтобы быть очень экономичной и простой в эксплуатации. Loki не индексирует содержимое логов, а вместо этого...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

Summary The kcp front-proxy fails to strip client-supplied identity headers before forwarding requests to shards. Any authenticated tenant can inject their own X-Remote-Group and X-Remote-Extra- headers, which the shard trusts as a verified identity assertion — allowing a low-privilege user to...

cloudfoundry_uaa

CloudFoundry 사용자 계정 및 인증UAA 서버 UAA는 Cloud Foundry에서 사용되는 멀티 테넌트 ID 관리 서비스이지만, 독립형 OAuth2 서버로도 사용할 수 있습니다. 주요 역할은 OAuth2 공급자로, 클라이언트 애플리케이션이 Cloud Foundry 사용자를 대신하여 작업할 때 사용할 토큰을 발급하는 것입니다. 또한 Cloud Foundry 자격 증명을 사용하여 사용자를 인증할 수 있으며, 해당 자격 증명또는 다른 자격 증명을 사용하여 SSO 서비스로 작동할 수 있습니다. 사용자 계정 관리 및 OAut...

CVE-2026-54495 Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-23552

CVE-2026-23552 - Принятие токенов между realm в camel-keycloak Обзор KeycloakSecurityPolicy в Apache Camel не проверяет утверждение iss эмитент JWT-токенов на соответствие настроенному realm. Это означает, что токен, выданный одним realm Keycloak, молча принимается политикой, настроенной для...

OWASP-Top-10-AI-Infrastructure-Security-Risks

데이터센터 및 AI 인프라 보안 위험 Top 10 FORGE - 모델 아래의 메탈을 강화하세요. 🌐 웹사이트: https://forge-framework.io 경영진 요약 AI 데이터센터는 보안이 확보되는 속도보다 더 빠르게 구축되고 있습니다. 데이터센터, GPU 클라우드, 특수 컴퓨팅 환경의 급속한 확장은 하드웨어, 네트워킹, 스토리지, 오케스트레이션, 아이덴티티, 관리 플레인, 물리적 운영 전반에 걸쳐 보안 위험을 초래했습니다. 이러한 위험 중 상당수는 기존 데이터센터 또는 클라우드 보안 문제와 유사하지만, 현대 데이터센터...

CVE-2025-34159

CVE-2025-34159: Внедрение Docker Compose в Coolify Обзор уязвимости Поле| Значение ---|--- CVE ID| CVE-2025-34159 Затрагивает| Coolify ≤ v4.0.0-beta.420.6 Исправлено в| v4.0.0-beta.420.7 Серьёзность| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS...

agentZ

AgentZ 제로 트러스트 에이전트 AI 플랫폼 AI 에이전트를 구축, 실행, 관리하세요. 보안을 기본 설계로. 모든 에이전트는 기본 거부default-deny 샌드박스 내에서 실행되며 자격 증명을 절대 받지 않습니다. 모든 에이전트 작업은 추적 가능합니다. AgentZ는 AI 에이전트를 실행하기 위한 멀티 테넌트 플랫폼입니다. 강력한 격리 보장, 에이전트에 대한 제로 자격 증명 노출, 기본 거부 네트워크 포스트, 그리고 에이전트가 접근할 수 있는 소프트웨어 패키지에 대한 제어를 제공합니다. 웹사이트 : AgentZ 랜딩 페이...

CVE-2026-61595 djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust.tenants isolation was enforced only on the HTTP path. The current tenant was stored in threading.local and set exclusively by the HTTP-only TenantMiddleware...

POC_CVE-2026-46716

CVE-2026-46716 — Межарендное RCE в Nezha Monitoring через обход авторизации API Cron Лабораторная среда для воспроизведения и обнаружения CVE-2026-46716 , критической уязвимости в Nezha Monitoring, где конечная точка POST /api/v1/cron не проверяет права администратора, позволяя пользователям с...

CVE-2026-55253

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list, MongoDBSaver.alist, and MongoDBStore.search incorporate filter dictionaries into MongoDB queries without...

EUVD-2026-77674

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list, MongoDBSaver.alist, and MongoDBStore.search incorporate filter dictionaries into MongoDB queries without...

CVE-2026-84199

A flaw was found in Kyverno. A Server-Side Request Forgery SSRF vulnerability exists in the APICall feature due to improper validation of the URL field in a Policy's ServiceCall configuration. A user with namespace-level Policy creation permissions can exploit this to direct Kyverno to make HTTP...

CVE-2026-81540

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...

CVE-2026-87820

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

CVE-2026-87820 CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

CVE-2026-75156

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...