203 matches found
gvisor
What is gVisor? gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language Go and runs in userspace. gVisor includes an runtime...
nanoclaw
Un asistente de IA que ejecuta agentes de forma segura en sus propios contenedores. Ligero, diseñado para ser fácilmente entendido y completamente personalizado según tus necesidades. nanoclaw.dev • documentación • 中文 • 日本語 • 한국어 • • Por qué construí NanoClaw OpenClaw es un proyecto impresionante...
agentbox
Agentbox - Sandbox de Agentes de Codificación No hay una forma perfecta de aislar agentes todavía, pero los contenedores son un inicio práctico. Agentbox es un sandbox para agentes de codificación basado en Docker, originalmente inspirado por Batrachian Toad, y ahora generalizado para más...
sysbox
Introduction Sysbox is an open-source and free container runtime a specialized "runc", originally developed by Nestybox acquired by Docker on 05/2022, that enhances containers in two key ways: Improves container isolation: Linux user-namespace on all containers i.e., root user in the container ha...
yolobox
root@kitploit: ██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝...
lockc
lockc es un software de código abierto para proporcionar auditoría de seguridad de tipo MAC Control de Acceso Obligatorio para cargas de trabajo en contenedores. La razón principal por la que lockc existe es que los contenedores no contienen. Los contenedores no son tan seguros ni aislados como l...
kata-containers
Kata Containers Kata Containers에 오신 것을 환영합니다! 이 저장소는 2.0 이상 릴리스용 Kata Containers 코드가 있는 곳입니다. Kata Containers에 대해 알아보려면 주요 Kata Containers 웹사이트를 방문하세요. 소개 Kata Containers는 컨테이너처럼 느껴지고 작동하면서도 VM의 워크로드 격리 및 보안 이점을 제공하는 경량 가상 머신VM의 표준 구현을 구축하기 위해 노력하는 오픈 소스 프로젝트이자 커뮤니티입니다. 라이선스 코드는 Apache 2.0 라이선스에 ...
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...
Astra Linux – Vulnerability in docker.io-app
Moby is an open-source container framework developed by Docker Inc., distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby versions prior to 28.0.0. When firewalld is reloaded, Docker fails to recreate...
CVE-2026-62313
Incus (system container and VM manager) prior to 7.3.0 contains a bypass of the project-level restriction restricted.containers.privilege=isolated. The check only rejects an explicitly set security.idmap.isolated=false or empty value, but does not enforce the restriction when the key is omitted e...
CVE-2026-62313 Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...
Linux Distros Unpatched Vulnerability : CVE-2026-63295
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is...
CVE-2026-63295
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
CVE-2026-63295
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
EUVD-2026-57516
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
CVE-2026-63295
CVE-2026-63295 describes an authorization bypass in LXD where project isolation can be defeated if an instance configuration omits the security.idmap.isolated key. An authenticated attacker can create or update an instance without this setting, potentially bypassing restricted.containers.privileg...
CVE-2026-63295 Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...
PT-2026-71283
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...