Prommetrix

信息： Prommetrix 是一款免费软件工具，用于从由 Prometheus 执行的 'Node Exporter' 实例中获取相关信息。 Prometheus 是一种开源的、基于指标的事件监控和告警解决方案，适用于云应用。包括 Uber、Slack、Robinhood 等在内的近 800 家云原生组织都在使用它。通过从各个端点抓取实时指标，Prometheus 可以轻松观察系统状态，此外还能观察硬件和软件指标，例如内存使用率、网络使用率以及软件特有的定义指标（例如对 Web 应用程序的失败登录尝试次数）。...

CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat 示例跨站脚本攻击利用 🔴 高级跨站脚本攻击（XSS）扫描与利用工具 —— Apache Tomcat 示例 Web 应用 📌 概述 CVE-2026-50229 是发现于 Apache Tomcat 所捆绑的 示例 Web 应用 中的一个 跨站脚本（XSS） 漏洞。该缺陷存在于 webapps/examples/jsp/num/ 目录下的 numguess.jsp 演示页面中，未经过滤的 HTTP 请求参数会在未进行 适当的清理或转义 的情况下直接反射回受害者的浏览器。 本仓库提供一个用 Python 编写的...

DevDojo Voyager <=1.8.0 - Cross-Site Scripting

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. id: CVE-2024-55416 info: name: DevDojo Voyager =1.8.0 - Cross-Site Scripting author:...

CVE-2026-29114

CVE-2026-29114 — 大华（Dahua）设备CA根证书暴露 公告类型： 厂商协调的安全披露 CVE ID： CVE-2026-29114 厂商： 大华技术（Dahua Technology） 发布时间： 2026-06-10T05:44:50 UTC 最后修改： 2026-06-10T05:44:50 UTC 来源： 大华产品安全事件（PSI）信任中心 目录 执行摘要 概览 与相关CVE的关系 漏洞时间线 描述 技术分析 受影响产品 CVSS评分 漏洞评分详情 CWE分类 攻击前提条件 利用场景 影响评估 检测与入侵指标 缓解与补救措施 临时解决方案 厂商回应 参考 免责声明...

Fedora 45 : python-jwcrypto (2026-6d094c5360)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d094c5360 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.19-4.2.hum1 aarch64, x8664 cups-client-2.4.19-4.2.hum1 aarch64, x8664 cups-devel-2.4.19-4.2.hum1 aarch64, x8664 cups-filesystem-2.4.19-4.2.hum1 noarch cups-ipptool-2.4.19-4.2.hum1...

PT-2026-92006

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in OpenSSL

Issue summary: A timing side-channel that could potentially allow the recovery of the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow an attacker to recover the private key. However, measuring the timing woul...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Web Browser UI of Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 141.0.7390.54 allowed a remote attacker to potentially perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in imagemagick

In the IntensityCompare function within /MagickCore/quantize.c, a double value was being converted to an int and then returned. In some cases, this resulted in a value that was outside the range of the type int. This flaw could be triggered by a malicious input file under certain conditions when...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

Important: edk2

Issue Overview: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a...

DEBIAN-CVE-2026-87631

Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...