2038 matches found
SecGen
Security Scenario Generator SecGen Resumen SecGen crea máquinas virtuales vulnerables, entornos de laboratorio y desafíos de hacking, para que los estudiantes puedan aprender técnicas de pruebas de penetración en seguridad. Las máquinas como Metasploitable2 son siempre las mismas. Este proyecto...
mose
MOSE Master Of SErvers...
Puppet Server/PuppetDB - Sensitive Information Disclosure
Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...
imagick_secure_puppet
solo incluye la clase y si imagick existe... reemplazará el policy.xml con una versión base de ubuntu 14.04 ligeramente modificada con políticas adicionales implementadas Ejecutando mediante puppet apply: root@kitploit: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv...
puppet-os-hardening
Puppet OS 加固 目录 1. 模块描述 - 该模块的功能及其用途 2. 安装 - oshardening 入门基础 安装要求 开始使用 oshardening 3. 用法 - 配置选项和附加功能 Puppet Enterprise 重要提示 参数 Hiera 用法 关于需要/不需要的软件包和已禁用的服务的说明 4. 限制 - 操作系统兼容性等 5. 开发 - 为模块贡献代码的指南 6. 测试 - 代码变更的质量门禁 本地测试 PDK 测试 集成测试（Docker） 集成测试（DigitalOcean） PR 和 fork 的 CI 测试 7. 联系我们 8. 贡献者 + 致谢 9...
puppet-ssh-hardening
Puppet SSH hardening Description This Puppet module provides secure ssh-client and ssh-server configurations. Requirements Puppet Puppet modules: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Parameters ipv6enabled = false - true if IPv6 is needed...
puppet-shellshock
Este módulo determina la vulnerabilidad de un binario bash a los exploits de shellshock CVE-2014-6271 o CVE-2014-7169 y luego lo parchea cuando sea posible. Plataformas soportadas: Debian 5, 6, 7 Ubuntus 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Uso root@kitploit: class 'shellshock': Facter...
CVE-2026-85979
Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...
CVE-2026-85979
Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...
UBUNTU-CVE-2026-85979
Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...
EUVD-2026-76124
Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...
CVE-2026-85979 Command Injection in Puppet Enterprise
Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...
CVE-2026-85979
Puppet Enterprise is affected by a command injection vulnerability in the handling of the java_keystore_passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by supplying a specially crafted value for this parameter, which is passed to a...
CVE-2026-85979 Command Injection in Puppet Enterprise
Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...
joomlavs
joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...
PT-2026-89884
Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java keystore passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which ...
puppetlabs-cve20113872
CVE-2011-3872 Remediation Toolkit Este módulo le ayudará a remediar permanentemente la vulnerabilidad CVE-2011-3872 AltNames. Guías de uso Consulte las guías de uso detalladas en: README-detailed.markdown para remediar su sitio con Puppet README-ssh-only.markdown Para remediar su sitio con SSH...
SecGen
EL DESARROLLO SE HA MOVIDO A http://github.com/cliffe/SecGen/, ¡ESTE REPO NO SE MANTIENE Y PROBABLEMENTE NO FUNCIONARÁ! Generador de Escenarios de Seguridad SecGen Resumen SecGen crea máquinas virtuales vulnerables para que los estudiantes puedan aprender técnicas de pruebas de penetración en...