Varnish is a versatile reverse HTTP proxy that caches responses from backend servers in memory so they are served quickly from main memory when they are requested again.In this tutorial, you will set up Varnish as a caching reverse proxy server. You’ll then test the setup with Varnish against a non-caching configuration using wrk.
🟢 Low ⏱ 5–15 min Last verified: 25 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40320 Upstream summary: cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5028182 • MSRC update-guide entry Related CVEs: CVE-2023-35315 CVE-2023-35365 CVE-2023-35366 CVE-2023-35367 CVE-2023-32057 CVE-2023-35297 CVE-2023-21756 CVE-2023-33166 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-6070 CVE-2020-6104 CVE-2020-6105 CVE-2020-6106 CVE-2020-6107 CVE-2020-6108 Upstream summary: An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file […]
Introduction Deploying secure the mariadb installation on debian 12 on a Debian 12 Bookworm machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-20005 CVE-2018-19764 CVE-2018-20004 CVE-2018-20593 CVE-2016-4570 CVE-2016-4571 CVE-2018-20592 Upstream summary: pkgsrc audit-packages flagged mxml-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-20005 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 25 July 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6879-1 Related CVEs: CVE-2023-31620 CVE-2023-31622 CVE-2023-31624 CVE-2023-31626 CVE-2023-31627 CVE-2023-31629 CVE-2023-31630 CVE-2023-31631 +12 more Upstream summary: Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker […]
Data persistence and file storage represent two of the biggest challenges when horizontally scaling web applications. This is mainly due to the fact that it is hard to maintain consistency of variable data between multiple application nodes.
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 20230506.66984-r0 📖 ~4 min read • Source: Alpine secdb entry — texlive 20230506.66984-r0 Related CVEs: CVE-2023-32700 Upstream summary: Alpine community repository for vv3.18 ships texlive 20230506.66984-r0 which addresses CVE-2023-32700. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 25 July 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6148-1 Related CVEs: CVE-2023-25076 Upstream summary: It was discovered that SNI Proxy did not properly handle wildcard backend hosts. An attacker could possibly use this issue to cause a buffer […]
