SUSE SLES15 Security Update : ansible-core (SUSE-SU-2026:4154-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4154-1 advisory. - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Tenable has extracted the...

patch-openssl-CVE-2014-0291_CVE-2015-0204

patch-openssl-CVE-2015-0291CVE-2015-0204 使用 Ansible 修补 OpenSSL 使用方法： root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2015-0291CVE-2015-0204 你的 inventory 文件只需包含你的服务器列表： root@kitploit: 192.168.0.10 webserver1.example.com webserver2.example.com...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 用于修补MySQL服务器以应对CVE-2016-6662的简单Ansible playbook。 更新 20160915.2347.CEST: Kenny 告知我 Patrick Forsberg 发现原始补丁未能防范 ../ 滥用。我现在已用更严格的补丁（结合了 Percona 和 MySQL 补丁）替换，并添加了一个任务，如果已应用 Percona 补丁则将其移除。 CVE 摘要 简而言之，它会尝试将一个恶意 .so 文件写入文件系统，并修改你的配置，使其在下次服务重启时加载。 补丁摘要 此补丁不会阻止实际的攻击，但它会修改...

CVE-2021-20253

CVE-2021-20253: Ansible Tower 中通过作业隔离逃逸实现权限提升 在 ansible-tower 中发现了一个缺陷。默认安装容易受到作业隔离逃逸的影响，允许攻击者从隔离环境外部将权限从低权限用户提升到 awx 用户。此漏洞的最大威胁在于数据机密性、完整性以及系统可用性。 供应商披露： 该漏洞的供应商披露和修复方法可在此处找到：此处。 要求： 此漏洞需要： 能够在 Ansible Tower 的隔离环境中执行命令 具有对操作系统的低权限访问 概念验证： 更多详细信息和利用过程可在此 PDF 中找到。...

Mitigate-CVE-2023-46747

用于缓解 CVE-2023-46747 的 Ansible Playbook K000137353：BIG-IP 配置工具未经身份验证的远程代码执行漏洞 CVE-2023-46747 链接如下 https://my.f5.com/manage/s/article/K000137353 使用方法 1. Git 克隆我的仓库 https://github.com/maniak-academy/Mitigate-CVE-2023-46747.git 2. 根据你的 BIG-IP 信息更新 hosts.ini 3. 执行 playbook root@kitploit:...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...

ansible-CVE-2024-3094

ansible-CVE-2024-3094 CVE-2024-3094（XZバックドア）を確認および修復するためのAnsibleプレイブックです。https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/ のガイダンスを基に開発されました。 背景 Linuxシステムが脆弱性の影響を受けるかどうかの確認は、1台や2台のシステムであれば簡単ですが、多数のシステムを管理している場合はどうでしょうか？これは、そのプロセスの自動化を少しでも容易にするための私のささやかな試みです。 Ubuntu...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 スキャナープレイブック Log4Shell（CVE-2021-44228）に対して脆弱なJARファイルをファイルシステム上でスキャンする非常にシンプルなAnsibleプレイブックです。 結果はローカルシステムのCSVファイルに保存されます。 実行方法 CSVファイル名の値は localfile 変数を介して渡す必要があります。 root@kitploit: ansible-playbook --extra-vars "localfile=./jdnidev.csv" log4j-cve-2021-44228.yml...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the Ansible Engine when using the moduleargs feature. Tasks executed with the --check-mode option do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The greatest threat posed by this vulnerability is...

Security update for ansible-core

This update for ansible-core fixes the following issues: CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

MiracleLinux 8 : ansible-core-2.16.3-4.el8_10.ML.1 (AXSA:2026-1818:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1818:04 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding...

ansible-ssh-hardening

ssh-hardening（Ansible 角色） 注意： 此角色已迁移至我们的 hardening-collection： https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening 请在那里提交任何 issue 和 pull request！ 要求 Ansible 2.5 角色变量 networkipv6enable 默认值：false 描述：如果需要 IPv6，则设为 true。sshlistento 也必须设置为监听 IPv6 地址（例如 ::）。...

ansible-playbook-cve-2024-3094

此存储库没有 README。...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...