suricata_exporter

Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -versio...

loki

Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log...

ayaFlow

ayaFlow ayaFlow is a Rust + eBPF network traffic analyzer built with Aya. It runs one agent per Linux node, attaches a TC classifier at ingress and egress, and exposes live traffic data, historical SQLite-backed history, and Prometheus metrics. What It Does Captures IPv4, IPv6, TCP, and UDP traff...

prometheus

Installing Prometheus Prometheus is a Ruby application and will run on any system running a recent version 1.8.7 or higher of Ruby. To install Prometheus use the following steps: 1. Create a directory called prometheus. 2. Extract the prometheus files into the directory. 3. CD into the prometheus...

Prometheus - Open Redirect

Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and...

Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...

CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — Prometheus Remote Read Snappy DoS...

SUSE SLES15 Security Update : golang-github-prometheus-prometheus (SUSE-SU-2026:4606-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4606-1 advisory. golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege...

GO-2026-6770 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

prometheus-bearer-redirect

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · prometheus-bearer-redirect prometheus-bearer-redirect Class: Credential leak Reach: Remote Prometheus v3.15.0 5241a27 - CNCF / Prometheus prometheus/common v0.71.0 already strips scrape / HTTPClientConfig credentials ...

grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

GO-2026-6720 yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels in github.com/jhaals/yopass

yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels in github.com/jhaals/yopass...

CVE-2026-40179-PoC

CVE-2026-40179 — Prometheus stored XSS via remotewrite A minimal, dependency-light proof of concept for CVE-2026-40179 GHSA-vffh-x6r8-xx99: stored cross-site scripting in the Prometheus web UI, delivered through an unauthenticated remotewrite endpoint. The vulnerability Prometheus 3.x renders...

Prommetrix

Info: Prommetrix is a free software tool to obtain relevant information from the instances of 'Node Exporter' executed by 'Prometheus'. Prometheus is an open-source, metrics-based event monitoring and alerting solution for cloud applications. It is used by nearly 800 cloud-native organizations...

golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media (moderate)

golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:12058-1 Rating: moderate Cross-References: CVE-2026-2303 CVSS scores: CVE-2026-2303 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves o...

grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API

A flaw was found in Grafana. The Prometheus rule conversion API endpoints fail to enforce a limit on request body sizes. An authenticated user can exploit this vulnerability by submitting excessively large requests to trigger unbounded memory allocation, which crashes the server and results in a...

CVE-2026-78659 affecting package prometheus-adapter for versions less than 0.12.0-12

CVE-2026-78659 affecting package prometheus-adapter for versions less than 0.12.0-12. A patched version of the package is available...

CVE-2026-78660 affecting package prometheus-adapter for versions less than 0.12.0-12

CVE-2026-78660 affecting package prometheus-adapter for versions less than 0.12.0-12. A patched version of the package is available...

CVE-2026-78663 affecting package prometheus-adapter for versions less than 0.12.0-12

CVE-2026-78663 affecting package prometheus-adapter for versions less than 0.12.0-12. A patched version of the package is available...

CVE-2026-78669 affecting package prometheus-adapter for versions less than 0.12.0-12

CVE-2026-78669 affecting package prometheus-adapter for versions less than 0.12.0-12. A patched version of the package is available...