CVE-2024-6387-Mitigation-Ansible-Playbook

Playbook de Ansible para Mitigación de CVE-2024-6387 Un playbook de Ansible para mitigar el riesgo de la vulnerabilidad regreSSHion RCE CVE-2024-6387 hasta que las plataformas actualicen OpenSSH a una versión no vulnerable. La mitigación aplicada aquí se basa en el Consejo de Mitigación...

CVE-2026-31431

CVE-2026-31431 Introduction Run with: root@kitploit: ansible-playbook -v -i environment/production/inventory --timeout=1 playbook.yml Links https://copy.fail https://vulners.com/cve/CVE-2026-31431 https://access.redhat.com/security/cve/cve-2026-31431...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

patch-openssl-CVE-2014-0291_CVE-2015-0204

patch-openssl-CVE-2015-0291CVE-2015-0204 Patch openssl with ansible Usage : root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2015-0291CVE-2015-0204 yourinventoryfile just need to contain your server list : root@kitploit: 192.168.0.10 webserver1.example.co...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 检测器扫描器 playbook 使用官方 Red Hat Log4j 检测器脚本验证目标 Linux 主机的 Ansible playbook，用于 Log4Shell（CVE-2021-44228）。 Red Hat 版本 1.3 检测器 2022-01-10。 结果保存在 detectordir（默认：/opt/cve-2021-44228/）下的 txt 文件中。 Ansible Galaxy 角色 代码也可作为 Ansible Galaxy 角色使用：lucab85.ansiblerolelog4shellbash...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Simple ansible playbook to patch mysql servers against CVE-2016-6662. UPDATE 20160915.2347.CEST: Kenny informed me of Patrick Forsberg's catch that the original patch did not safeguard against ../ abuse. I've now replaced the patch with one that is more stringent based...

Mitigate-CVE-2023-46747

Ansible Playbook para Mitigar CVE-2023-46747 K000137353: Vulnerabilidad de ejecución remota de código no autenticado en la utilidad de configuración de BIG-IP CVE-2023-46747 Aquí está el enlace https://my.f5.com/manage/s/article/K000137353 Cómo usarlo 1. Clona mi repositorio...

ansible-CVE-2024-3094

ansible-CVE-2024-3094 Ansible playbooks 用于检查和修复 CVE-2024-3094 XZ Backdoor。这些 playbooks 是根据 https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/ 的指导开发的。 背景 如果只有一两个系统，运行检查来查看你的 Linux 系统是否存在漏洞很简单，但如果你管理着一大批系统呢？这是我谦逊的尝试，旨在让这个过程的自动化变得稍微容易一些。 这已经在 Ubuntu 22.04 上测试过。 使用说明 预检查 1...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 scanner playbook Very simple Ansible playbook that scan the filesystem for JAR files vulnerable to Log4Shell CVE-2021-44228. The result is saved in a CSV file in the local system. How to run A value for the name of the CSV file must be passed via the localfile variable...

ansible-playbook-cve-2024-3094

Este repositorio no tiene un README...

CVE-2014-6271

CVE-2014-6271 Bash Shellshock e Aftershock Tester per Ansible 1. Installa Ansible http://docs.ansible.com/introinstallation.html 2. Aggiungi i server al file di inventario esempio: root@kitploit: username@ip 3. Copia la tua chiave pubblica in .ssh/authorizedkeys dei server remoti 4. esegui il tes...

flyphish

Flyphish Flyphish è un playbook Ansible che consente ai consulenti di cybersecurity di distribuire un server di phishing nel cloud per valutazioni di sicurezza. Il playbook installa e configura Gophish , Postfix e OpenDKIM su una macchina virtuale nel cloud. Inoltre, per scopi di OPSEC, il playbo...

EUVD-2026-62937

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

EUVD-2026-62933

In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not authorized to view. The vulnerability is possible because Playbook History does not check repository permissions before...

EUVD-2026-62930

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom list retrieval in a playbook, allowing for create, read, update, and delete operations on a...

Mattermost Server 10.11.x < 10.11.22 / 11.7.x < 11.7.7 Multiple Vulnerabilities (MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704 advisories. - Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to prevent guest users from receiving Board Admin...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-76366

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer REST API filtering on playbook runs to recover session tokens that compromise all data available to the affected user. The information disclosure is possible because Splunk SOAR...

CVE-2026-76368

In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not authorized to view. The vulnerability is possible because Playbook History does not check repository permissions before...

CVE-2026-76365

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom list retrieval in a playbook, allowing for create, read, update, and delete operations on a...