4408 matches found
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...
CVE-2026-52618
CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...
ansible-CVE-2024-3094
ansible-CVE-2024-3094 Playbooks de Ansible diseñados para comprobar y remediar CVE-2024-3094 Backdoor XZ. Fueron desarrollados con la guía de https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/. Contexto Ejecutar las comprobaciones para ver si su sistema Linux es...
log4j-cve-2021-44228
Playbook de escáner Log4j-CVE-2021-44228 Un playbook de Ansible muy simple que escanea el sistema de archivos en busca de archivos JAR vulnerables a Log4Shell CVE-2021-44228. El resultado se guarda en un archivo CSV en el sistema local. Cómo ejecutar El valor para el nombre del archivo CSV debe...
Astra Linux – Vulnerability in Ansible
A flaw was discovered in the Ansible Engine when using the moduleargs feature. Tasks executed with the --check-mode option do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The greatest threat posed by this vulnerability is...
Security update for ansible-core
This update for ansible-core fixes the following issues: CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
MiracleLinux 8 : ansible-core-2.16.3-4.el8_10.ML.1 (AXSA:2026-1818:04)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1818:04 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding...
ansible-ssh-hardening
ssh-hardening Rol de Ansible Atención: Este rol ha sido migrado a nuestra hardening-collection: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening ¡Por favor, abre cualquier issue y pull request allí! Requisitos Ansible 2.5 Variables del Rol...
ansible-playbook-cve-2024-3094
Este repositorio no tiene un README...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
aws-log4j-mitigations
aws-log4j-mitigations 在 AWS 上实施的缓解措施，以尝试防止 log4j 漏洞利用。 使用 WAFv2 和 Ansible。 灵感来源：https://github.com/OllieJC/aws-log4j-mitigations...
cve-2021-4034
cve-2021-4034...
CVE-2014-6271
CVE-2014-6271 Bash Shellshock（及Aftershock）漏洞 Ansible 检测工具 1. 安装 Ansible http://docs.ansible.com/introinstallation.html 2. 将服务器添加到清单文件（示例）： root@kitploit: username@ip 3. 将您的公钥复制到远程服务器的 .ssh/authorizedkeys 文件中 4. 执行测试 $ ansible-playbook -i inventory site.yml...
ansible_CVE-2016-5195_check
Descripción Playbook para probar la vulnerabilidad dirty cow CVE-2016-5195. Dependencias usuario local en el sistema con privilegios sudo Ejecución root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Enlaces http://dirtycow.ninja...
openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:21828-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21828-1 advisory. - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Tenable has extracted the preceding...