Introduction to Storage Tiering with Storage Spaces on Windows Server 2022 Storage tiering is a feature of Windows Server Storage Spaces that automatically moves frequently accessed data to faster storage (such as SSDs or NVMe drives) and less frequently accessed data to higher-capacity, lower-cost storage (such as HDDs). This provides a best-of-both-worlds approach: you get […]
🟡 Medium ⏱ 15–45 min Last verified: 23 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2001-0573, IBM PSIRT advisory page CVE: CVE-2001-0573 NVD summary: lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:2589 Related CVEs: CVE-2022-32323 Upstream summary: AutoTrace is a program for converting bitmaps to vector graphics. Security Fix(es): * autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323) For more details about […]
Introduction Setting up configure selinux policies on oracle linux 9 on a Oracle Linux 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Configure SELinux Policies on Oracle Linux 9, with all the commands you need, the SELinux and firewalld considerations to keep in […]
🟡 Medium ⏱ 15–45 min Last verified: 23 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2002-1201, IBM Support Bulletin CVE: CVE-2002-1201 NVD summary: IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed […]
🟡 Medium ⏱ 10–30 min Last verified: 23 March 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-2234 Related CVEs: CVE-2022-39377 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 23 March 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — Multiple vulnerabilities Related CVEs: CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 Upstream summary: The OpenSSL project reports: Severity: low Applications that use a non-default option when verifying certificates may be vulnerable to […]
🟢 Low ⏱ 5–15 min Last verified: 23 March 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]
A practical guide to MFA bypass, modern extortion tactics, session theft, recovery abuse, phishing-resistant authentication, and identity security controls.
🟢 Low ⏱ 5–15 min Last verified: 23 March 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]
