En tant qu’administrateur web, vous pouvez trouver utile de restreindre certaines parties d’un site web aux visiteurs, que ce soit de manière temporaire ou permanente. Si les apps web peuvent fournir leurs propres méthodes d’authentification et d’autorisation, vous pouvez…
🟡 Medium ⏱ 10–30 min Last verified: 2 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7614-1 Related CVEs: CVE-2017-2661 CVE-2022-2735 CVE-2018-1086 CVE-2022-1049 Upstream summary: Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive […]
🟠 High ⏱ 15–60 min Last verified: 2 January 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9726 Related CVEs: CVE-2022-21385 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
In this guide, we will cover how to create user accounts, assign sudo privileges, and delete users on a CentOS 8 server.
Introduction to TLS/SSL for Remote Desktop Protocol Remote Desktop Protocol (RDP) is one of the most widely used management interfaces in Windows Server environments, and it is also one of the most frequently targeted services by attackers. Securing RDP with proper TLS/SSL configuration on Windows Server 2022 is not optional — it is a fundamental […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:0290 Related CVEs: CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 Upstream summary: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs. It provides APIs for extracting […]
Learn how to use Angular Universal to implement SSR (Server Side Rendering).
🟡 Medium ⏱ 15–45 min Last verified: 1 January 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-42436, IBM Support Bulletin CVE: CVE-2022-42436 NVD summary: IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force […]
🟡 Medium ⏱ 5–30 min Last verified: 1 January 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 1 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: XFCE — Allows executing malicious .desktop files pointing to remote code Related CVEs: CVE-2022-32278 Upstream summary: XFCE Project reports: Prevent executing possibly malicious .desktop files from online sources (ftp://, http:// […]
