18 matches found
ludus_xz_backdoor
Rol de Ansible: xz backdoor CVE-2024-3094 para Ludus Un rol de Ansible que instala el xz backdoor CVE-2024-3094 en un host Debian y, opcionalmente, instala la herramienta xzbot. !WARNING ¡Este rol despliega malware a propósito! Sin exponer el host a internet deberías estar a salvo, pero sigue...
rt_redirectors
Rol de Ansible que permite desplegar rápidamente un redirector en un servidor existente con reglas de proxy modrewrite, Compatible con Debian y Ubuntu, probado en Digital ocean y Azure Consulta threat.tevora.com/automating-redirector-deployment-with-ansible para un blog que recorre los redirector...
ansible-role-cve
Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. root@kitploit: cve20165195: false Example Playbook root@kitploit: --- ...
ansible-role-log4shell
Rol de Ansible - log4shell ⭐ Danos una estrella en GitHub — ¡nos motiva mucho! Encuentra Log4Shell CVE-2021-44228 en tu sistema Este rol intenta encontrar JAR y WAR en el sistema de archivos y en archivos abiertos lsof ⚠️ Su sistema puede funcionar lentamente durante el escaneo debido a un find en...
CVE-2021-44228
Rol de Ansible para Mitigación de Log4Shell CVE-2021-44228 Este rol de Ansible despliega un script basado en Python para mitigar programáticamente la vulnerabilidad Log4Shell CVE-2021-44228 eliminando la clase vulnerable JndiLookup de los archivos JAR de Log4j afectados. Está diseñado para...
CVE-2016-3714.ansible.role
Ansible Role: CVE-2016-3714 Fix ImageMagick Command Injection CVE-2016-3714 security issue with Ansible. Requirements Any installed imagemagick and before v6.7.7.10 machine. Role Variables A description of the settable variables for this role should go here, including any variables that are in...
ansible-role-cve-2026-31431
ansible-role-cve-2026-31431 Rol de Ansible para aplicar y posteriormente eliminar la mitigación de modprobe.d para CVE-2026-31431 "Copy Fail" en el subsistema AFALG / algifaead del kernel de Linux. Probado en Debian. Las solicitudes de extracción para otras distribuciones, casos límite o mejoras...
polkit_CVE-2021-4034
Nombre del rol Rol de Ansible para parchear RHSB-2022-001 Escalada de privilegios de Polkit - CVE-2021-4034 Requisitos Los repositorios deben estar configurados. Variables del rol Todas las variables están en el archivo /vars/main.yml. También se añade al archivo una lista de paquetes vulnerables...
bash-fix-exploit
bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...
log4j-cve-2021-44228
Log4j-CVE-2021-44228 detector scanner playbook Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script for Log4Shell CVE-2021-44228. Red Hat version 1.3 detector 2022-01-10. The result is saved in a txt file under detectordir default: /opt/cve-2021-44228/...
ansible-ssh-hardening
ssh-hardening دور Ansible تنبيه: تم ترحيل هذا الدور إلى مجموعة التصلب الخاصة بنا: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening يرجى فتح أي مشكلات وطلبات سحب هناك! المتطلبات Ansible 2.5 متغيرات الدور networkipv6enable الافتراضي: false الوصف: true إذا...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
cfDr - Copy Fail Doctor Copy Fail Detection and...
Medium: ansible-core
Issue Overview: The upstream report describes this issue as follows: When installing a maliciously created Ansible role using 'ansible-galaxy role install', arbitrary files the user has access to can be overwritten. The malicious role must contain a symlink with an absolute path to the target fil...
Moderate: Red Hat Security Advisory: RHV Engine and Host Common Packages security update
Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Important: Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.9]
Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Low: Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.7]
Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...