🟠 High ⏱ 30–90 min Last verified: 31 January 2021 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2021-29706, IBM Support Bulletin CVE: CVE-2021-29706 NVD summary: IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or […]
How to Set Up Certificate Services (AD CS) on Windows Server 2019 Active Directory Certificate Services (AD CS) provides a Public Key Infrastructure (PKI) for issuing and managing digital certificates within an organization. These certificates enable TLS/SSL for websites, smart card authentication, email encryption (S/MIME), code signing, encrypted file systems (EFS), and IPsec. Windows Server […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1915 Related CVEs: CVE-2021-36160 CVE-2021-44224 CVE-2020-35452 CVE-2021-33193 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
Introduction How to Configure Audit Logging on Oracle Linux 8 on Oracle Linux 8 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-070 Related CVEs: CVE-2021-4002 Upstream summary: No CVE associated with this advisory Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
How to Harden Active Directory Against Pass-the-Hash on Windows Server 2012 R2 Pass-the-Hash (PtH) is an attack technique in which an adversary captures an NTLM credential hash from one system and uses it to authenticate to other systems without knowing the actual password. Because NTLM hashes are reusable, a single compromised credential can lead to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-7098 CVE-2019-16239 CVE-2012-6128 CVE-2020-12105 CVE-2020-12823 CVE-2012-3291 CVE-2018-20319 Upstream summary: OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35605 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202107-41 Related CVEs: CVE-2021-32707 Upstream summary: Type: information disclosure. Status: Fixed. Affected: 1.9.5-2. Fixed in: 1.10.1-1. Group: AVG-2145. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202107-22 Related CVEs: CVE-2021-32741 CVE-2021-32734 CVE-2021-32733 CVE-2021-32726 CVE-2021-32725 CVE-2021-32705 CVE-2021-32703 CVE-2021-32688 +4 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 21.0.2-1. Fixed in: 21.0.3-1. Group: AVG-2144. Table of contents […]
