[SECURITY] [DLA 3609-1] prometheus-alertmanager security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3609-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries October 08, 2023 https://wiki.debian.org/LTS -...

DLA-3609-1 prometheus-alertmanager - security update

Bulletin has no description...

Debian dla-3609 : golang-github-prometheus-alertmanager-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3609 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3609-1 [email protected] https://www.debian.org/lts/security/...

SUSE: Security Advisory (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:3868-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3868-1 advisory. - An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

SUSE SLES12 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:3867-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3867-1 advisory. - An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : Golang Prometheus (SUSE-SU-2023:3888-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3888-1 advisory. - Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time...

SUSE-SU-2023:3888-1 Security update for Golang Prometheus

This update for Golang Prometheus fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. bsc1213880 There are ...

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-c1318fb7f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-1b25579262)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-cf176d02d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc38

Utility package to build exporters...

[SECURITY] Fedora 37 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc37

Utility package to build exporters...

Fedora 37 : golang-github-prometheus-exporter-toolkit / etc (2023-1b25579262)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-1b25579262 advisory. Security fix for CVE-2022-46146, update to v0.10.0 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 38 : golang-github-prometheus-exporter-toolkit / etc (2023-c1318fb7f8)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-c1318fb7f8 advisory. notes=Security fix for CVE-2022-46146, update to v0.10.0 Tenable has extracted the preceding description block directly from the Fedora security...

[SECURITY] Fedora 39 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc39

Utility package to build exporters...

Metasploit Weekly Wrap-Up

Flask Cookies This week includes two modules related to Flask cookie signatures. One is specific to Apache Superset where session cookies can be resigned, allowing an attacker to elevate their privileges and dump the database connection strings. While adding this functionality, community member...

Prometheus Sensitive Endpoint Detected

Prometheus is an open-source monitoring solution which is designed to record metrics in a dimensional data model to make it available through its own PromQL query language or built-in visualization capabilities. Prometheus offer multiple libraries named 'Exporters' to help exporting these endpoin...

Prometheus API Information Gather

This module utilizes Prometheus' API calls to gather information about the server's configuration, and targets. Fields which may contain credentials, or credential file names are then pulled out and printed. Targets may have a wealth of information, this module will print the following values whe...

Prometheus Node Exporter And Windows Exporter Information Gather

This modules connects to a Prometheus Node Exporter or Windows Exporter service and gathers information about the host. Tested against Docker image 1.6.1, Linux 1.6.1, and Windows 0.23.1 Module Options msf use auxiliary/gather/prometheusnodeexportergather msf auxiliaryprometheusnodeexportergather...