Prommetrix

정보: Prommetrix는 'Prometheus'가 실행하는 'Node Exporter' 인스턴스에서 관련 정보를 얻기 위한 무료 소프트웨어 도구입니다. Prometheus는 클라우드 애플리케이션을 위한 오픈소스, 메트릭 기반 이벤트 모니터링 및 알림 솔루션입니다. Uber, Slack, Robinhood 등을 포함한 약 800개의 클라우드 네이티브 조직에서 사용됩니다. Prometheus는 다양한 엔드포인트에서 실시간 메트릭을 스크래핑하여 시스템 상태를 쉽게 관찰할 수 있게 하며, 메모리 사용량, 네트워크 사용량 및...

DevDojo Voyager <=1.8.0 - Cross-Site Scripting

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. id: CVE-2024-55416 info: name: DevDojo Voyager =1.8.0 - Cross-Site Scripting author:...

CVE-2026-29114

CVE-2026-29114 — 다후아 장치 CA 루트 인증서 노출 권고 유형: 벤더 협력 보안 공개 CVE ID: CVE-2026-29114 벤더: 다후아 테크놀로지Dahua Technology 게시일: 2026-06-10T05:44:50 UTC 최종 수정일: 2026-06-10T05:44:50 UTC 출처: 다후아 제품 보안 사고PSI 트러스트 센터 목차 요약 한눈에 보기 관련 CVE와의 관계 취약점 타임라인 설명 기술 분석 영향받는 제품 CVSS 점수 취약점 점수 세부 정보 CWE 분류 공격 전제 조건 악용 시나리오 영향 ...

CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat 예제 XSS 익스플로잇 🔴 Apache Tomcat 예제 웹 애플리케이션용 고급 XSSCross-Site Scripting 스캐너 및 익스플로잇 📌 개요 CVE-2026-50229 은 Apache Tomcat 에 포함된 번들 예제 웹 애플리케이션 에서 발견된 XSSCross-Site Scripting 취약점입니다. 이 결함은 webapps/examples/jsp/num/ 내의 numguess.jsp 데모 페이지에 존재하며, 필터링되지 않은 HTTP 요청 매개변수가 적절...

Fedora 45 : python-jwcrypto (2026-6d094c5360)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d094c5360 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.19-4.2.hum1 aarch64, x8664 cups-client-2.4.19-4.2.hum1 aarch64, x8664 cups-devel-2.4.19-4.2.hum1 aarch64, x8664 cups-filesystem-2.4.19-4.2.hum1 noarch cups-ipptool-2.4.19-4.2.hum1...

PT-2026-92006

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Information disclosure occurs within the Networking component. Recommendations Update Firefox t...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in OpenSSL

Issue summary: A timing side-channel that could potentially allow the recovery of the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow an attacker to recover the private key. However, measuring the timing woul...

Astra Linux – Vulnerability in imagemagick

In the IntensityCompare function within /MagickCore/quantize.c, a double value was being converted to an int and then returned. In some cases, this resulted in a value that was outside the range of the type int. This flaw could be triggered by a malicious input file under certain conditions when...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 141.0.7390.54 allowed a remote attacker to potentially perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass the same-origin policy and proxy settings through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in imagemagick

The function WritePALMImage in /coders/palm.c uses sizet type conversions in several parts of the calculation. This could lead to values that are outside the range of the representable type unsigned long, resulting in undefined behavior when a malicious input file is processed by ImageMagick...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. Chromium security severity: Low...