MAL-011

MAL-011: Red Hat AMQ における Log4J の設定ミスにより悪意のある JavaScript の実行が可能 Redhat A-MQ アプリケーションの Log4J コンポーネントは、Log4J 設定内の任意の “Script” 属性の実行を許可するように誤って設定されています。攻撃者が A-MQ で使用される Log4J 設定（例:“setConfigText” を介して）を変更する方法を見つけた場合、悪意のある JavaScript スクリプトを挿入することで、リモートコード実行（RCE）が発生します。 注: Red Hat AMQ のバージョン 7.10.2...

php-malware-finder

PHP Malware Finder root@kitploit: | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as we...

ansible-role-log4shell

lucab85.ansiblerolelog4shell Ansible 角色，用于使用 Red Hat 官方 Log4j 检测器脚本 RHSB-2021-009 扫描目标 Linux 主机，以检测 Log4Shell CVE-2021-44228。 已使用 Red Hat 1.3 版检测器 2022-01-10 进行测试。 Ansible Playbook 该代码也以 Ansible Playbook 形式提供：lucab85/log4j-cve-2021-44228 要求 ansible 2.9+ 角色变量 默认变量值 - defaults/main.yml：...

vuln-list-redhat

vuln-list-redhat Red Hat セキュリティ勧告...

Important: Red Hat Security Advisory: Satellite 6.16.13 Async Update

An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: Satellite 6.19.4 Async Update

A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: Satellite 6.17.11 Async Update

A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: Satellite 6.18.9 Async Update

A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vmaas-rhel9 container image

A new satellite/iop-vmaas-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running...

Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image

A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...

Important: Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-frontend-rhel9 container image

A new satellite/iop-host-inventory-frontend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running...

Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

CVE-2018-14665

CVE-2018-14665 ここでは、最も使用されているLinuxディストリビューション向けの私の分析とPoCを見つけることができます。 今のところRed Hatから始めました。これは公式RHSAへのリンクです。 RHSA-2018:3410...

Important: Red Hat Security Advisory: Red Hat Quay 3.15.8

Red Hat Quay 3.15.8 is now available with bug fixes. Quay 3.15.8...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.3-0.5.hum1 aarch64, x8664 grafana13.1-13.1.3-0.5.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.1.hum1 aarch64, x8664 grafana13.2-13.2.1-0.1.hum1.src src...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.97 packages and security update

Red Hat OpenShift Container Platform release 4.12.97 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.4 security update

Important: Red Hat OpenShift GitOps v1.21.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10472 GITOPS-10477...