red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

vuln-list-redhat

vuln-list-redhat Red Hat セキュリティ勧告...

CVE-2018-14665

CVE-2018-14665 ここでは、最も使用されているLinuxディストリビューション向けの私の分析とPoCを見つけることができます。 今のところRed Hatから始めました。これは公式RHSAへのリンクです。 RHSA-2018:3410...

Important: Red Hat Security Advisory: Red Hat Quay 3.16.6

Red Hat Quay 3.16.6 is now available with bug fixes. Quay 3.16.6...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 detector scanner playbook Log4Shell（CVE-2021-44228）用の公式Red Hat Log4j検出スクリプトを使用して、対象のLinuxホストを検証するAnsible playbookです。 Red Hat バージョン 1.3 detector 2022-01-10。 結果は detectordir（デフォルト: /opt/cve-2021-44228/）の下にあるtxtファイルに保存されます。 Ansible Galaxy ロール コードはAnsible Galaxyロール...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.9.9 release.

Red Hat Developer Hub 1.9.9 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: libvirt security update

An update for libvirt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: tesseract security update

An update for tesseract is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

ansible-role-log4shell

lucab85.ansiblerolelog4shell Log4Shell（CVE-2021-44228）対策として、公式のRed Hat Log4j検出スクリプト RHSB-2021-009 を使用して対象のLinuxホストをスキャンするAnsibleロールです。 Red Hat バージョン 1.3 ディテクタ 2022-01-10 でテスト済みです。 Ansible Playbook コードはAnsible Playbook lucab85/log4j-cve-2021-44228 としても利用できます。 Requirements ansible 2.9+ Role Variabl...

priority-intelligence-requirements-dev

Red Hat における優先インテリジェンス要件（PIR）の策定 v1.1...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

CLEANSTART-2026-YL24808 flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management

Security vulnerability affects the keycloak package. A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management...

CLEANSTART-2026-QJ88718 flaw was found in the keycloak-services component of Red Hat Build of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the keycloak-services component of Red Hat Build of Keycloak...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

MAL-011

MAL-011：Log4J 配置错误允许在 Red Hat AMQ 中执行恶意 JavaScript Redhat A-MQ 应用程序的 Log4J 组件配置错误，允许在 Log4J 配置中执行任意的“Script”属性。如果攻击者找到修改 A-MQ 使用的 Log4J 配置的方法（例如通过“setConfigText”），则会插入恶意 JavaScript 脚本，从而导致远程代码执行（RCE）。 注意： 对于利用 Red Hat AMQ 版本 7.10.2 且 7.12 的漏洞，请参阅 CVE-2023-50780：可通过 Apache ActiveMQ Artemis 中的...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

php-malware-finder

PHP Malware Finder root@kitploit: | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as we...