Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install Descripción del proyecto Archivos de instalación e implementación rápida con un solo clic, completamente automáticos, para nodos master y node de Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 sin la vulnerabilidad CVE-2018-1002105, adecuados para entornos de...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

iconvfix

iconvfix Script Bash para parchear CVE-2024-2961 Actualmente funciona en CentOS7. Sin garantía, no usar en sistemas de producción, esto es solo una ayuda interna : Uso tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2021-4034

CVE-2021-4034 PoC para PwnKit: Vulnerabilidad de escalada local de privilegios en pkexec de polkit CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

encrypted-linux-kernel-modules

ELKM: Módulos de kernel cargables cifrados para Linux x86-64 ELKM proporciona un mecanismo para transportar y cargar de forma segura Módulos de Kernel Cargables LKM cifrados. El objetivo es proteger rootkits e implantes basados en kernel contra la observación por parte del software de Detección y...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 利用sudo提权，只针对cnetos7 受影响版本： sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 以非root用户登录系统，并运行如下命令： sudoedit -s / 回显是 not a regular file 多半是存在该漏洞 使用方法： 首先使用非root用户登录，然后将/etc/passwd里面所有的内容复制到CVE-2021-3156.py的APPENDCONTENT = b"""\n""";里面，将改普通用户的uid和gid都改成0然后运行CVE-2021-3156.py文件...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == 问题 客户有一台旧的 CentOS7 机器，已到达生命周期终点（EOL） CentOS7 运行的是较旧版本的 openssl，该版本受 link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 的影响 如何为旧的 CentOS7 上的 openssl 打补丁以修复该 CVE？ == 步骤 1. link:./docs/1.CVE-2021-3712-analysis.adoc使用 NVD、CVSS/EPSS 评分和 CISA KEV 数据对 CVE/漏洞进行分类 2...

CVE-2021-3156

exploit.py Bifurcado desde @worawit, más corto y optimizado. Solo funciona para sudo=1.8.23 en Centos7 Funciona tanto en servidores web como en máquinas Linux backdoor.php backdoor php generado mediante weevely, contraseña: "H@rmWsH4rE!". Proporciona acceso a una sesión ssh como Apache si se carg...

pac-exploits-priv

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulne...

Veeam Backup & Replication 13: Changes to Supported Linux Platforms

Article Applicability This article lists the specific Linux distributions and versions that will no longer be supported starting with Veeam Backup & Replication and Veeam Agent for Linux version 13. These lists are intended for customers currently running Veeam Backup & Replication 12.3 and Veeam...

EUVD-2018-9717

Malware in sbrugna...

EUVD-2025-20792

Malicious code in bioql PyPI...

EUVD-2025-20793

Malicious code in bioql PyPI...

CVE-2025-27028

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...

CVE-2025-3497

The Linux distribution underlying the Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 is obsolete and reached end of life EOL on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product...

CVE-2025-3497 Radiflow iSAP Smart Collector Linux distribution unmaintained

The Linux distribution underlying the Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 is obsolete and reached end of life EOL on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product...

CVE-2025-27028 Read access of deprivileged Radiflow iSAP Smart Collector user

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...

CVE-2025-27028

The CVE-2025-27028 entry concerns Radiflow iSAP Smart Collector (CentOS 7, VSAP 1.20). A deprivileged Linux user vpuser can read the entire filesystem, exposing restricted files (e.g., root password hash). Affected component is the file system access for vpuser; root cause details are not provide...