log4j-cve-2021-44228

Log4j-CVE-2021-44228 detector scanner playbook Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script for Log4Shell CVE-2021-44228. Red Hat version 1.3 detector 2022-01-10. The result is saved in a txt file under detectordir default: /opt/cve-2021-44228/...

CVE-2021-44228

Log4Shell CVE-2021-44228 Mitigation Ansible Role This Ansible role deploys a Python-based script to programmatically mitigate the Log4Shell vulnerability CVE-2021-44228 by removing the vulnerable JndiLookup class from affected Log4j JAR files. It is designed to be run via Ansible, but you can als...

CVE-2016-3714.ansible.role

Ansible Role: CVE-2016-3714 Fix ImageMagick Command Injection CVE-2016-3714 security issue with Ansible. Requirements Any installed imagemagick and before v6.7.7.10 machine. Role Variables A description of the settable variables for this role should go here, including any variables that are in...

bash-fix-exploit

bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...

ludus_xz_backdoor

Ansible Role: xz backdoor CVE-2024-3094 for Ludus An Ansible Role that installs the xz backdoor CVE-2024-3094 on a Debian host and optionally installs the xzbot tool. !WARNING This role deploys malware on purpose! Without exposing the host to the internet you should be safe, but it's still malwar...

ansible-role-log4shell

Ansible role - log4shell ⭐ Star us on GitHub — it motivates us a lot! Find Log4Shell CVE-2021-44228 on your system This role tries to find JAR and WAR from filesystem and from opened files lsof ⚠️ Your system may runs slowly during the scan due to a find on / and the unarchive process to lookup...

rt_redirectors

Ansible role that allows for quickly deploying a redirector to an existing server with modrewrite proxy rules, Supports Debian and Ubuntu, tested in Digital ocean and Azure See threat.tevora.com/automating-redirector-deployment-with-ansible for a blog walking through redirectors, ansible, and a...

ansible-role-cve-2026-31431

ansible-role-cve-2026-31431 Ansible role to apply and later remove the modprobe.d mitigation for CVE-2026-31431 "Copy Fail" in the Linux kernel's AFALG / algifaead subsystem. Tested on Debian. Pull requests for other distributions, edge cases, or improvements are very welcome. What it does The ro...

polkit_CVE-2021-4034

Role Name Ansible role to patch RHSB-2022-001 Polkit Privilege Escalation - CVE-2021-4034 Requirements Repositories should be configured. Role Variables All the variables are in /vars/main.yml file. A list of polkit vulnerable packages is also added to the file as a list, you can update the list...

ansible-role-cve

Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. cve20165195: false Example Playbook --- - hosts: localhost connection:...

XZ Utils 5.6.1 Backdoor Detection / Mitigation

An Ansible role and Python tool detect backdoored XZ Utils versions and liblzma libraries associated with CVE-2024-3094, back up affected files, upgrade supported distribution packages, and optionally restart sshd...

OpenSSH 9.7p1 regreSSHion Mitigation

An Ansible role and Python tool detect OpenSSH versions affected by the regreSSHion signal-handler race and upgrade openssh-server or apply the documented LoginGraceTime 0 workaround...

ansible-ssh-hardening

ssh-hardening Ruolo Ansible Attenzione: Questo ruolo è stato migrato nella nostra hardening-collection: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening Si prega di aprire eventuali issue e pull request lì! Requisiti Ansible 2.5 Variabili del Ruolo...

ansible-role-chrony (>=1.0.3, <=1.3.0), hive-builder (>=2.2.0, <=2.3.1) +2 more potentially affected by CVE-2025-14010 via ansible (2.10.0rc1)

ansible PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-role-chrony =1.0.3, =2.2.0, =0.0.1, =2.7.1 - pytest-ansible 2.2.3 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ansible-role-chrony (>=1.0.3, <=1.3.0), hive-builder (>=2.2.0, <=2.3.1) +2 more potentially affected by CVE-2023-5115 via ansible (2.10.0rc1)

ansible PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-role-chrony =1.0.3, =2.2.0, =0.0.1, =2.7.1 - pytest-ansible 2.2.3 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...

ansible (>=6.0.0b1, <=8.7.0), ansible-doctor (>=3.1.2, <=3.1.3) +48 more potentially affected by CVE-2026-11332 via ansible-core (>=2.11.0, <=2.16.6)

ansible-core PYPI version =2.11.0, =6.0.0b1, =3.1.2, =1.1.2, =1.0.2, =1.0.4.1233rc0, =6.0.0, =8.0.0, =1.0.0, =1.4.1, =0.0.1, =0.0.17 and more Source cves: CVE-2026-11332 Source advisory: GHSA-W8P5-MX5W-CPQJ...

ansible (>=6.0.0b1, <=8.7.0), ansible-doctor (>=3.1.2, <=3.1.3) +48 more potentially affected by CVE-2026-11332 via ansible-core (>=2.11.0, <=2.16.6)

ansible-core PYPI version =2.11.0, =6.0.0b1, =3.1.2, =1.1.2, =1.0.2, =1.0.4.1233rc0, =6.0.0, =8.0.0, =1.0.0, =1.4.1, =0.0.1, =0.0.17 and more Source cves: CVE-2026-11332 Source advisory: OSV:GHSA-W8P5-MX5W-CPQJ...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

cfDr - Copy Fail Doctor Copy Fail Detection and...

ansible-role-chrony (>=1.0.3, <=1.3.0), hive-builder (>=2.2.0, <=2.3.1) +2 more potentially affected by CVE-2025-14010 via ansible (2.10.0rc1)

ansible PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-role-chrony =1.0.3, =2.2.0, =0.0.1, =2.7.1 - pytest-ansible 2.2.3 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...