azure-vulnerability-remediation-project

Vulnerability Research & Remediation: Azure Cloud Infrastructure Project Overview This project documents the end-to-end vulnerability management lifecycle for a cloud-hosted Windows Server 2025 instance CyberVM. The lab demonstrates a proactive approach to identifying, analyzing, and neutralizing...

KSK-ITDK-CVE-2026-21509-Mitigation

CVE-2026-21509-Mitigation Powershell script with Detection and Remediation for CVE-2026-21509...

cve-2026-31431-fleet-remediator

CVE-2026-31431 Fleet Audit and Remediation Tool 中文说明 This project is a fleet-scale orchestrator for auditing and remediating CVE-2026-31431 on Linux hosts in enterprise/internal networks. Batch SSH login to multiple hosts Risk evidence collection and status classification Temporary mitigation...

ai-agent-security-research

AI Agent Security Research Open security research on AI coding agent infrastructure. Published by Hodge Luke Digital Intelligence Agency What This Is This repository contains security research, vulnerability analysis, and remediation guidance for AI coding agent platforms. Every advisory includes...

Exploit-Mapper

Exploit Mapper A comprehensive vulnerability management platform that analyzes security scan reports, enriches vulnerability data with exploit intelligence, and provides actionable risk scoring for prioritized remediation. Features Multi-Format Import : Support for CSV and Excel vulnerability...

CVE_kernellinux_jsh

CVEkernellinuxjsh — kernelsec Framework Author: jshDevs · Version: 0.1.0-scaffold · License: MIT Modular Bash framework for auditing and remediating critical Linux kernel CVEs on RPM-based distributions AlmaLinux 8/9, Rocky Linux 8/9, CentOS Stream 8/9/10. Covered CVEs...

WinFlesher

Like PingCastle went out for drinks with Bloodhound, and they actually decided to get some work done. 🍷 WinFlesher is an advanced attack surface security assessment framework designed to analyze, evaluate, and report on security postures, attack paths, and remediation strategies in complex...

Ubuntu-CVE-2026-3888-patcher

🛡️ CVE-2026-3888 Remediation Script Many Hat Group Security Advisory Tool Overview This script has been developed by Many Hat Group to quickly identify and remediate systems affected by CVE-2026-3888 on Ubuntu environments. It is designed for use across managed fleets, providing: Automated...

teamcity-cve-2026-63077-remediation

Enterprise Security Remediation Suite A production-grade security engineering suite containing four specialized incident response and hardening packages. 📁 Repository Module Architecture root@kitploit: . ├── README.md Enterprise Suite Index & Quick Start ├── package.json Master test runner Jest +...

msxml4-remediation

MSXML 4.0 Remediation PowerShell PowerShell script to remediate security findings related to Microsoft XML Core Services MSXML 4.0 , which is unsupported and commonly flagged by vulnerability scanners. This script I made unregisters the .dll files for MSXML 4 and renames them. This remediates the...

Remediate-AdobeAcrobat-CVE-2026-34621

Intune Proactive Remediation – Adobe Acrobat/Reader Version Enforcement CVE-2026-34621 This repository contains Microsoft Intune Proactive Remediation scripts to reduce exposure to Adobe Acrobat/Reader vulnerabilities by: 1. Enforcing a minimum patched version detect outdated builds and remove...

spring4shell-local-verification-lab

Spring4Shell Local Impact Condition Verification, Remediation, and Re-testing Project Project Introduction This project is used for learning and verifying the impact conditions, risk manifestations, remediation methods, and post-remediation re-testing procedures for Spring Framework CVE-2022-2296...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == Problem Customer has old CentOS7 box which is EOL CentOS7 is running older openssl which is affected by link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 How openssl on old Centos7 should be patched for CVE? == Steps 1...

nessus-vulnerability-scanning-lab

Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...

cPanel-Fix

cPanel & kernel security helper One security-remediation.sh for CVE-2026-41940 cPanel, CVE-2026-31431 kernel "Copy Fail", CSF, optional domain/proxy cleanup, and optional operator hardening. Maintainer: Aria Jahangiri Far Clone root@kitploit: git clone https://github.com/MrAriaNet/cPanel-Fix.git ...

nginx-cve-fix

Nginx CVE Fix - Source-Built Drop-in for nginx:1.25-bookworm A source-built nginx 1.25.5 container image that remediates two CVEs present in the official nginx:1.25-bookworm image while preserving upstream runtime behavior...

log4j-remediation

sakurajilog4j This tool is used to discover and remedidate the Log4Shell vulnerability CVE-2021-45105 by removing the 'JndiLookup.class' file from '.ear|.jar|.war' files on Windows, Linux & Mac OS. Usage: Scan OS for Log4Shell vulnerability. - sakurajilog4j discover - Example:...

Check-Point-Trusted-Access-Review

Check Point Trusted Access Review PLEASE ALWAYS APPLY VENDOR PATCHES AS QUICKLY AS POSSIBLE Local web app for conducting a Check Point Trusted Access Review with trusted Check Point Management API commands. Most checks are review-only. Any available remediation action requires explicit operator...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution

CWP Control Web Panel 0.9.8.1205 contains a remote code execution caused by shell metacharacters in the ttotal parameter in filemanager changePerm request, letting unauthenticated attackers execute code remotely, exploit requires knowledge of a valid non-root username. id: CVE-2025-48703 info:...