CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == Problema Cliente possui uma máquina CentOS7 antiga que está EOL CentOS7 está executando openssl mais antigo que é afetado por link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 Como o openssl no CentOS7 antigo deve ser corrigido para o CVE? == Passos 1...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 Exploração de privilégio com sudo, apenas para cnetos7 Versões afetadas: sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 Faça login no sistema como um usuário não root e execute o seguinte comando: sudoedit -s / Se a saída for "not a regular file", provavelmente a vulnerabilida...

iconvfix

iconvfix Script Bash para corrigir o CVE-2024-2961 Atualmente funciona no CentOS 7. Sem garantia, não use em sistemas de produção, este é apenas um auxiliar interno : Uso tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2021-3156

exploit.py @worawit से फोर्क किया गया, छोटा और अनुकूलित। केवल Centos7 पर sudo=1.8.23 के लिए काम करता है। वेब सर्वर और लिनक्स मशीनों दोनों पर काम करता है। backdoor.php weevely के माध्यम से उत्पन्न php बैकडोर, पासवर्ड: "H@rmWsH4rE!"। यदि सफलतापूर्वक सर्वर पर अपलोड किया जाता है तो Apache के रूप में...

Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install Introdução do projeto Compilação pessoal de arquivos de instalação e implantação totalmente automáticos e rápidos, com um clique, para os nós master e node, baseados em CentOS 7.x + Kubernetes-1.12.3 + Dashboard-1.8.3, sem a vulnerabilidade CVE-2018-1002105...

CVE-2021-4034

CVE-2021-4034 PwnKit के लिए PoC: polkit के pkexec में स्थानीय विशेषाधिकार वृद्धि भेद्यता CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

encrypted-linux-kernel-modules

ELKM: وحدات Kernel القابلة للتحميل المشفَّرة لنظام Linux x86-64 توفر ELKM آلية لنقل وتحميل وحدات Kernel القابلة للتحميل LKM المشفَّرة بشكل آمن. الهدف هو حماية الجذور الخفية rootkits القائمة على النواة والبرمجيات المزروعة implants من المراقبة بواسطة برامج كشف نقاط النهاية والاستجابة EDR، وتحييد آث...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

pac-exploits-priv

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulne...

Veeam Backup & Replication 13: Changes to Supported Linux Platforms

Article Applicability This article lists the specific Linux distributions and versions that will no longer be supported starting with Veeam Backup & Replication and Veeam Agent for Linux version 13. These lists are intended for customers currently running Veeam Backup & Replication 12.3 and Veeam...

EUVD-2018-9717

Malware in sbrugna...

EUVD-2025-20793

Malicious code in bioql PyPI...

EUVD-2025-20792

Malicious code in bioql PyPI...

CVE-2025-27028

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...

CVE-2025-3497

The Linux distribution underlying the Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 is obsolete and reached end of life EOL on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product...

CVE-2025-3497 Radiflow iSAP Smart Collector Linux distribution unmaintained

The Linux distribution underlying the Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 is obsolete and reached end of life EOL on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product...

CVE-2025-27028

The CVE-2025-27028 entry concerns Radiflow iSAP Smart Collector (CentOS 7, VSAP 1.20). A deprivileged Linux user vpuser can read the entire filesystem, exposing restricted files (e.g., root password hash). Affected component is the file system access for vpuser; root cause details are not provide...

CVE-2025-27028 Read access of deprivileged Radiflow iSAP Smart Collector user

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...

Linux Distros Unpatched Vulnerability : CVE-2018-17977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTOAH packets, and IPPROTOIP packets, which allows local users to cause...