Prommetrix

Información: Prommetrix es una herramienta de software libre para obtener información relevante de las instancias de 'Node Exporter' ejecutadas por 'Prometheus'. Prometheus es una solución de código abierto de monitoreo de eventos y alertas basada en métricas para aplicaciones en la nube. Es...

suricata_exporter

Exportador Prometheus de Suricata Este es un Exportador Prometheus para Suricata que utiliza dump-counters a través del socket Unix para consultar métricas. Uso $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default...

Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...

Prometheus - Open Redirect

Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and...

ayaFlow

ayaFlow ayaFlow is a Rust + eBPF network traffic analyzer built with Aya. It runs one agent per Linux node, attaches a TC classifier at ingress and egress, and exposes live traffic data, historical SQLite-backed history, and Prometheus metrics. What It Does Captures IPv4, IPv6, TCP, and UDP traff...

loki

Loki: como Prometheus, pero para logs. Loki es un sistema de agregación de logs multiinquilino, altamente disponible y escalable horizontalmente, inspirado en Prometheus. Está diseñado para ser muy rentable y fácil de operar. No indexa el contenido de los logs, sino un conjunto de etiquetas para...

CVE-2026-40179-PoC

CVE-2026-40179 — XSS almacenado en Prometheus a través de remotewrite Una prueba de concepto mínima y con pocas dependencias para CVE-2026-40179 GHSA-vffh-x6r8-xx99: cross-site scripting almacenado en la interfaz web de Prometheus, entregado a través de un endpoint remotewrite sin autenticación. ...

prometheus

Instalación de Prometheus Prometheus es una aplicación Ruby y se ejecutará en cualquier sistema que tenga una versión reciente 1.8.7 o superior de Ruby. Para instalar Prometheus, siga los siguientes pasos: 1. Crea un directorio llamado prometheus. 2. Extrae los archivos de prometheus en el...

CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — Prometheus Remote Read Snappy DoS...

Rocky Linux 8.6 [CIQ] Security Update: prometheus-jmx-exporter / prometheus-jmx-exporter-openjdk11 / etc (ciqsa-2026_0151)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260151 advisory. This advisory aggregates security fixes for the prometheus-jmx-exporter SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-1471. Tenable has extracted the precedin...

OPENSUSE-SU-2026:11925-1 prometheus-blackbox_exporter-0.26.0-9.1 on GA media

These are all security issues fixed in the prometheus-blackboxexporter-0.26.0-9.1 package on the GA media of openSUSE Tumbleweed...

ROOT-APP-GOBINARY-CVE-2026-42154 CVE-2026-42154 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42154 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42151 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

Missing Authorization

Overview @openclaw/diagnostics-prometheus is an OpenClaw diagnostics Prometheus exporter for runtime metrics. Affected versions of this package are vulnerable to Missing Authorization via the authenticated metrics endpoint, which does not enforce the operator.read scope. An authenticated caller...

CVE-2026-100525

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

EUVD-2026-87525

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CVE-2026-100525

The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 fails to enforce the operator.read scope on its authenticated metrics endpoint. In environments utilizing identity-bearing Gateway authentication modes, such as trusted-proxy , an authenticated c...

CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...