20 matches found
rt_redirectors
Ansible role that allows for quickly deploying a redirector to an existing server with modrewrite proxy rules, Supports Debian and Ubuntu, tested in Digital ocean and Azure See threat.tevora.com/automating-redirector-deployment-with-ansible for a blog walking through redirectors, ansible, and a...
ansible-role-cve-2026-31431
ansible-role-cve-2026-31431 Ansible role to apply and later remove the modprobe.d mitigation for CVE-2026-31431 "Copy Fail" in the Linux kernel's AFALG / algifaead subsystem. Tested on Debian. Pull requests for other distributions, edge cases, or improvements are very welcome. What it does The ro...
polkit_CVE-2021-4034
Role Name Ansible role to patch RHSB-2022-001 Polkit Privilege Escalation - CVE-2021-4034 Requirements Repositories should be configured. Role Variables All the variables are in /vars/main.yml file. A list of polkit vulnerable packages is also added to the file as a list, you can update the list...
log4j-cve-2021-44228
Log4j-CVE-2021-44228 detector scanner playbook Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script for Log4Shell CVE-2021-44228. Red Hat version 1.3 detector 2022-01-10. The result is saved in a txt file under detectordir default: /opt/cve-2021-44228/...
ansible-role-log4shell
Ansible role - log4shell ⭐ Star us on GitHub — it motivates us a lot! Find Log4Shell CVE-2021-44228 on your system This role tries to find JAR and WAR from filesystem and from opened files lsof ⚠️ Your system may runs slowly during the scan due to a find on / and the unarchive process to lookup...
CVE-2016-3714.ansible.role
Ansible Role: CVE-2016-3714 Fix ImageMagick Command Injection CVE-2016-3714 security issue with Ansible. Requirements Any installed imagemagick and before v6.7.7.10 machine. Role Variables A description of the settable variables for this role should go here, including any variables that are in...
ludus_xz_backdoor
Ansible Role: xz backdoor CVE-2024-3094 for Ludus An Ansible Role that installs the xz backdoor CVE-2024-3094 on a Debian host and optionally installs the xzbot tool. !WARNING This role deploys malware on purpose! Without exposing the host to the internet you should be safe, but it's still malwar...
bash-fix-exploit
bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...
ansible-role-cve
Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. cve20165195: false Example Playbook --- - hosts: localhost connection:...
CVE-2021-44228
Log4Shell CVE-2021-44228 Mitigation Ansible Role This Ansible role deploys a Python-based script to programmatically mitigate the Log4Shell vulnerability CVE-2021-44228 by removing the vulnerable JndiLookup class from affected Log4j JAR files. It is designed to be run via Ansible, but you can als...
ansible-ssh-hardening
ssh-hardening Ruolo Ansible Attenzione: Questo ruolo è stato migrato nella nostra hardening-collection: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening Si prega di aprire eventuali issue e pull request lì! Requisiti Ansible 2.5 Variabili del Ruolo...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...
ansible (>=6.0.0b1, <=8.7.0), ansible-doctor (>=3.1.2, <=3.1.3) +48 more potentially affected by CVE-2026-11332 via ansible-core (>=2.11.0, <=2.16.6)
ansible-core PYPI version =2.11.0, =6.0.0b1, =3.1.2, =1.1.2, =1.0.2, =1.0.4.1233rc0, =6.0.0, =8.0.0, =1.0.0, =1.4.1, =0.0.1, =0.0.17 and more Source cves: CVE-2026-11332 Source advisory: OSV:GHSA-W8P5-MX5W-CPQJ...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
cfDr - Copy Fail Doctor Copy Fail Detection and...
Medium: ansible-core
Issue Overview: The upstream report describes this issue as follows: When installing a maliciously created Ansible role using 'ansible-galaxy role install', arbitrary files the user has access to can be overwritten. The malicious role must contain a symlink with an absolute path to the target fil...
Moderate: Red Hat Security Advisory: RHV Engine and Host Common Packages security update
Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
ansible-role-chrony (>=1.0.3, <=1.3.0), hive-builder (>=2.2.0, <=2.3.1) +3 more potentially affected by CVE-2020-14332 via ansible (>=2.10.0rc1, <=2.10.0)
ansible PYPI version =2.10.0rc1, =1.0.3, =2.2.0, =0.0.1, =0.0.29, =0.0.31 Source cves: CVE-2020-14332 Source advisory: GHSA-J667-C2HM-F2WP...
Important: Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.9]
Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Low: Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.7]
Updated dependency packages for ovirt-engine and ovirt-host that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...