firecracker

我们的使命是支持安全、多租户、极低开销的容器与函数工作负载执行。 更多关于 Firecracker 宪章的内容，请参阅此处。 什么是 Firecracker？ Firecracker 是一种开源虚拟化技术，专为创建和管理安全、多租户的容器及函数式服务而设计，这些服务提供无服务器（serverless）运营模式。Firecracker 在称为 microVM 的轻量级虚拟机中运行工作负载，它结合了硬件虚拟化技术提供的安全性与隔离特性，以及容器的速度与灵活性。 概述 Firecracker 的主要组件是一个虚拟机监视器（VMM），它利用 Linux 内核虚拟机（KVM）来创建和运行...

loki

English | 简体中文 Alibaba Cloud Credentials for Go Alibaba Cloud Credentials for Go 是帮助 GO 开发者管理凭据的工具。 本文将介绍如何获取和使用 Alibaba Cloud Credentials for Go。 要求 请确保你的系统安装了 1.12.x 或更新版本的 Go 环境。 安装 使用 go get 下载安装 go get -u github.com/aliyun/credentials-go 快速使用 在您开始之前，您需要注册阿里云帐户并获取您的凭证。 凭证类型 使用默认凭据链...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 是我向 NVIDIA PSIRT 提交的一个漏洞。个人认为，在多租户 HPC 集群（尤其是云机器学习平台）中，它可能导致较高的安全风险。 本仓库简单地演示了该漏洞在由 nvidia-container-runtime 创建的 GPU 容器中的表现。 工作原理 通过创建特定的字符设备文件，GPU 容器（由 nvidia-container-runtime 创建的容器）中的攻击者能够访问宿主机上所有的 GPU 设备。 该漏洞同样适用于在 Kubernetes 集群上由 k8s-device-plugin 创建的 GPU Pod。 前提条...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

cloudfoundry_uaa

CloudFoundry ユーザーアカウントおよび認証（UAA）サーバー UAAはマルチテナントID管理サービスであり、Cloud Foundryで使用されますが、スタンドアロンのOAuth2サーバーとしても利用可能です。主な役割はOAuth2プロバイダーであり、Cloud Foundryユーザーに代わって動作するクライアントアプリケーションが使用するトークンを発行します。また、Cloud...

agentZ

零信任智能体 AI 平台 构建、运行和治理 AI 智能体。安全源于设计。 每个智能体都在默认拒绝的沙箱中运行，且永远不会获得 凭据。 每个智能体的操作都可追溯。 AgentZ 是一个用于运行 AI 智能体的多租户平台。它提供强大的隔离保证、对智能体的零凭据暴露、默认拒绝的网络态势，以及对智能体可访问的软件包的控制。 网站 ：AgentZ 落地页。 DeepWiki ：与仓库对话并快速贡献。 构建模块 1. 推理提供商 ：我们支持多种提供商（源自 OpenCode），包括 Amazon Bedrock、GCP Vertex、 Azure AI Foundry、OpenAI Codex...

djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

Impactdjust.tenants isolation was enforced only on the HTTP path. The current tenant was stored in threading.local and set exclusively by the HTTP-only TenantMiddleware, so on the live WebSocket/SSE path getcurrenttenant was always None during mount and every event handler — and the tenant-aware...

CVE-2026-23552

CVE-2026-23552 - camel-keycloak 中的跨领域令牌接受 概述 Apache Camel 的 KeycloakSecurityPolicy 不会根据所配置的领域验证 JWT 令牌的 iss（颁发者）声明。这意味着由某个 Keycloak 领域签发的令牌会被配置给完全不同的领域的策略静默接受，从而破坏租户隔离。 受影响版本：4.15.0、4.16.0、4.17.0 跟踪地址：https://issues.apache.org/jira/browse/CAMEL-22854 根本原因 在 KeycloakSecurityHelper.parseAccessToken...

CVE-2025-34159

CVE-2025-34159：Coolify 中的 Docker Compose 注入漏洞 漏洞概述 字段| 值 ---|--- CVE 标识符| CVE-2025-34159 影响范围| Coolify ≤ v4.0.0-beta.420.6 修复版本| v4.0.0-beta.420.7 严重性| 严重 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78（操作系统命令注入）、CWE-20（输入验证不恰当） 执行摘要 Coolify...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha 监控通过 Cron API 授权绕过实现跨租户 RCE 一个用于复现和检测 CVE-2026-46716 的实验室环境。该漏洞是 Nezha 监控中的一个严重漏洞：POST /api/v1/cron 端点缺少管理员权限检查，使 RoleMember 用户能够实现跨租户远程代码执行。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-46716 GHSA| GHSA-99gv-2m7h-3hh9 CVSS| 9.9（严重）— AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 受影响版本|...

CVE-2026-100701

Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the DNS host, while each cache entry also stores the caller-specific TLS servername. When two direct TLS/SMTPS transports secure: true resolve the same non-IP host with different tls.servername values, t...

EUVD-2026-87703

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

CVE-2026-100608 Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

CVE-2026-67412

A flaw was found in RabbitMQ. The Federation feature fails to enforce virtual host vhost authorization checks when validating upstream connections. An authenticated user with policy configuration privileges in one vhost can exploit this flaw by targeting another vhost where they lack permissions...

OWASP-Top-10-AI-Infrastructure-Security-Risks

데이터센터 및 AI 인프라 보안 위험 Top 10 FORGE - 모델 아래의 메탈을 강화하세요. 🌐 웹사이트: https://forge-framework.io 경영진 요약 AI 데이터센터는 보안이 확보되는 속도보다 더 빠르게 구축되고 있습니다. 데이터센터, GPU 클라우드, 특수 컴퓨팅 환경의 급속한 확장은 하드웨어, 네트워킹, 스토리지, 오케스트레이션, 아이덴티티, 관리 플레인, 물리적 운영 전반에 걸쳐 보안 위험을 초래했습니다. 이러한 위험 중 상당수는 기존 데이터센터 또는 클라우드 보안 문제와 유사하지만, 현대 데이터센터...

CVE-2026-19492 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

CVE-2026-19492: Use of Uninitialized Variable

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

PT-2026-96239

@grok @ai news x @elonmusk @sama Got it. Here is the evidence. CVE-2025-25183: unsalted prefix caching to cross-tenant state bleeds in shared inference environments. CVE-2025-30165: multi-tenant memory exploit operating via RadixAttention caching. CVE-2026-21845: cross-tenant leak in multi-GPU vL...

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

Summary The kcp front-proxy fails to strip client-supplied identity headers before forwarding requests to shards. Any authenticated tenant can inject their own X-Remote-Group and X-Remote-Extra- headers, which the shard trusts as a verified identity assertion — allowing a low-privilege user to...

EUVD-2026-82405

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...