Magnohost-Vulnerabilities-pentest

MagnoHost 渗透测试 对 MagnoHost 托管提供商及 MeteorCloud 基础设施的渗透测试。发现：6 台服务器上 MariaDB 暴露（CVSS 9.8），OmniDialer 默认凭据导致完全访问，Wings CVE-2024-27102（9.9），Grafana 暴露，DMARC 欺骗。仅使用 curlcffi + Python。零自动化扫描器。 目标信息...

Security Bulletin: IBM Storage Ceph is vulnerable to the Exposure of Sensitive Information to an Unauthorized Actor in Grafana (CVE-2025-22866)

Summary Grafana is used by IBM Storage Ceph as a metrics dashboard. This bulletin identifies the steps to take to address the vulnerability in Grafana. CVE-2025-22866 Vulnerability Details CVEID:CVE-2025-22866 DESCRIPTION: Due to the usage of a variable time instruction in the assembly...