Prommetrix

信息： Prommetrix 是一款免费软件工具，用于从由 Prometheus 执行的 'Node Exporter' 实例中获取相关信息。 Prometheus 是一种开源的、基于指标的事件监控和告警解决方案，适用于云应用。包括 Uber、Slack、Robinhood 等在内的近 800 家云原生组织都在使用它。通过从各个端点抓取实时指标，Prometheus 可以轻松观察系统状态，此外还能观察硬件和软件指标，例如内存使用率、网络使用率以及软件特有的定义指标（例如对 Web 应用程序的失败登录尝试次数）。...

loki

English | 简体中文 Alibaba Cloud Credentials for Go Alibaba Cloud Credentials for Go 是帮助 GO 开发者管理凭据的工具。 本文将介绍如何获取和使用 Alibaba Cloud Credentials for Go。 要求 请确保你的系统安装了 1.12.x 或更新版本的 Go 环境。 安装 使用 go get 下载安装 go get -u github.com/aliyun/credentials-go 快速使用 在您开始之前，您需要注册阿里云帐户并获取您的凭证。 凭证类型 使用默认凭据链...

[SECURITY] Fedora 45 Update: prometheus-3.15.0-1.fc45

The Prometheus monitoring system and time series database...

suricata_exporter

Suricata Prometheus Exporter 这是一个用于 Suricata 的 Prometheus Exporter，通过 unix socket 使用 dump-counters 来查询指标。 使用方法 $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -version Output version...

ayaFlow

ayaFlow ayaFlow 是一个基于 Rust + eBPF 的网络流量分析工具，构建于 Aya 之上。它在每个 Linux 节点上运行一个代理，在入口和出口附加 TC 分类器，并暴露实时流量数据、基于 SQLite 的历史记录以及 Prometheus 指标。 功能 通过 eBPF TC 分类器捕获 IPv4、IPv6、TCP 和 UDP 流量。 在内存中维护实时连接统计信息，并将历史记录存储在 SQLite 中。 可选地使用反向 DNS、DNS 查询域名和 TLS SNI 增强流量信息。 暴露 REST API、WebSocket 流和 Prometheus /metrics...

Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: minio, db-operator, argocd-image-updater, ksops, amazon-cloudwatch-agent-operator, clickhouse-operator, datadog-operator, sqlexporter, tekton-pipelines, net-kourier, argo-rollouts, kuma, azuredisk-csi, kots, dex, percona-server-mongodb-operator, istio,...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

prometheus

Instalación de Prometheus Prometheus es una aplicación Ruby y se ejecutará en cualquier sistema que tenga una versión reciente 1.8.7 o superior de Ruby. Para instalar Prometheus, siga los siguientes pasos: 1. Crea un directorio llamado prometheus. 2. Extrae los archivos de prometheus en el...

Prometheus - Open Redirect

Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and...

CVE-2026-40179-PoC

CVE-2026-40179 — 通过 remotewrite 实现的 Prometheus 存储型 XSS 针对 CVE-2026-40179 （GHSA-vffh-x6r8-xx99）的一个最小化、低依赖的概念验证：通过未认证的 remotewrite 接口，在 Prometheus Web UI 中实现存储型跨站脚本攻击。 漏洞详情 Prometheus 3.x 在将指标名称和标签值渲染到 Web UI 时使用了 innerHTML 且未进行转义。由于 Prometheus v3 放宽了标签验证规则以允许任意 UTF-8 字符 — 包括 和 " — 指标名称可以携带 HTML...

CVE-2026-37236 affecting package prometheus-adapter for versions less than 0.12.0-10

CVE-2026-37236 affecting package prometheus-adapter for versions less than 0.12.0-10. A patched version of the package is available...

CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — Prometheus 远程读取 Snappy 拒绝服务...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2022_1762)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221762 advisory. psgo: Privilege escalation in 'podman top' CVE-2022-1227 prometheus/clientgolang: Denial of service using InstrumentHandlerCounter CVE-2022-21698 podman:...

Rocky Linux 8.6 [CIQ] Security Update: prometheus-jmx-exporter / prometheus-jmx-exporter-openjdk11 / etc (ciqsa-2026_0151)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260151 advisory. This advisory aggregates security fixes for the prometheus-jmx-exporter SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-1471. Tenable has extracted the precedin...

OPENSUSE-SU-2026:11925-1 prometheus-blackbox_exporter-0.26.0-9.1 on GA media

These are all security issues fixed in the prometheus-blackboxexporter-0.26.0-9.1 package on the GA media of openSUSE Tumbleweed...

ROOT-APP-GOBINARY-CVE-2026-42154 CVE-2026-42154 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42154 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42151 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

Missing Authorization

Overview @openclaw/diagnostics-prometheus is an OpenClaw diagnostics Prometheus exporter for runtime metrics. Affected versions of this package are vulnerable to Missing Authorization via the authenticated metrics endpoint, which does not enforce the operator.read scope. An authenticated caller...

CVE-2026-100525

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...