CVE-2026-90182

A flaw was found in the Linux kernel's blk-iocost component. When policy data is freed, the system may fail to clear a delay state, causing the block cgroup a mechanism for resource management to remain marked as congested. This persistent congestion can lead to a significant reduction in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hns: Fixed the issue where the CPU got stuck due to printouts during reset. During reset, commands to destroy resources such as qp, cq, and mr may fail, and error logs will be printed. When a large number of resources are...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, the ingress ACL is used for three features. It is created only when the vport metadata match and the prio tag is enabled. However, the active-backup lag mode also uses...

FalconDash

FalconDash 是一个 Azure 工作簿，可让检测性能立即可见且可探索。 一个模块化仪表板，助您在更好地衡量检测性能并更加主动地维护检测的旅程中前行。...

YARA-Performance-Guidelines

YARA 性能优化指南 编写高效的 YARA 规则对于保持快速、准确的扫描性能至关重要。本指南提供关键原则和最佳实践，帮助你优化规则、减少不必要的计算并避免常见陷阱。它融合了行业专家的见解，包括 Victor M. Alvarez、WXS 以及 YARA 社区的贡献。 修订版 1.6，2025 年 2 月，适用于 YARA 3.7 以上的所有版本 核心要点 本节提供 YARA 性能最佳实践的简明摘要 。有关详细说明 和示例，请参阅下面的完整指南。 理解 YARA 的扫描过程 "把 YARA 想象成一个两步过程：首先，搜索 strings...

CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - 認可不足による未認証の設定エクスポート 説明 WordPress用プラグインSwift Performance Liteは、バージョン2.3.6.14まで（同バージョンを含む）のすべてのバージョンにおいて、admininit関数を介してフックされた機能でケイパビリティチェックが欠如しているため、不正なデータアクセスに対して脆弱です。これにより、未認証の攻撃者がプラグインの設定（Cloudflare APIトークンを含む可能性がある）をエクスポートすることが可能になります。 Severity...

perf-exploiter

perf-exploiter CVE-2014-2630 在我们最近的一次渗透测试中，我们利用了一个影响名为“xglance-bin”的 suid 二进制文件的漏洞。作为 HP Performance Monitoring 解决方案 的一部分，它使我们能够在一些 Linux RHEL 7.x/8.x 系统上将本地非特权会话提升至 root 权限。老实说，这并不是我们第一次利用这个特定漏洞，自 2014 年以来，我们已在许多安装了 RHEL 的 HP 服务器上频繁滥用该漏洞。 该漏洞确实有一个已注册的 CVE 编号（CVE-2014-2630），最初由 Portcullis 的 Tim...

[SECURITY] Fedora 45 Update: tiptop-2.3.2-8.fc45

Hardware performance monitoring counters have recently received a lot of attention. They have been used by diverse communities to understand and improve the quality of computing systems: For example, architects use them to extract application characteristics and propose new hardware mechanisms;...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

stenographer

Stenographer Overview Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection and incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files as disk fills up, and provides method...

stenographer

Stenographer 概要 Stenographerは、侵入検知およびインシデント対応を目的として、パケットをディスクにバッファリングするためのフルパケットキャプチャユーティリティです。NICからディスクへのパケット書き込みの高性能実装を提供し、ディスクがいっぱいになるとそれらのファイルを削除し、特定のパケットセットを迅速かつ簡単に読み戻すためのメソッドを提供します。 設計上の目的: パケットをディスクに非常に高速に書き込む（マルチコア、マルチディスクマシンで約10Gbps）...

Perfusion

Perfusion Windows 7 、Windows Server 2008R2 、Windows 8 、Windows Server 2012 では、RpcEptMapper および DnsCache（7/2008R2 のみ）サービスのレジストリキーに弱いアクセス許可が設定されています。任意のローカルユーザーが Performance サブキーを作成し、 Windows パフォーマンスカウンター を利用して、WMI サービスのコンテキストで NT AUTHORITY\SYSTEM として任意の DLL をロードできます（これがツール名の由来です）。...

Important: Red Hat Security Advisory: pcp security update

An update for pcp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: pcp security update

An update for pcp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838

Summary IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Detai...

CLEANSTART-2024-HO89117 Use after free in Performance APIs in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Performance APIs in Google Chrome prior to 101...

CLEANSTART-2024-YK43595 Use after free in Performance Manager in Google Chrome prior to 102

Security vulnerability affects the chromium package. Use after free in Performance Manager in Google Chrome prior to 102...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_5231)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245231 advisory. bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam CVE-2024-1737 bind9: bind: SIG0 can be used to exhaust CPU...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_5390)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245390 advisory. bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam CVE-2024-1737 bind9: bind: SIG0 can be used to exhaust CPU...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc (ALMALINUX9.2:CLSA-2024:1726683307)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1726683307 advisory. - Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from...