cookbook-update-glibc

cookbook-update-glibc Обзор cookbook для обновления glibc. CVE-2015-0235GHOST Япония http://www.walbrix.com/jp/blog/2015-01-ghost.html Английский http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Описание обновление glibc с помощью Chef Solo. Внимание. Этот кукбук требует перезагрузки...

CVE-2014-3566-poodle-cookbook

CVE-2014-3566-poodle Ce cookbook provoquera une erreur dans votre exécution chef si votre serveur est vulnérable à CVE-2014-3566. Bien que ce cookbook puisse être utilisé pour surveiller les échecs d'exécutions chef, il constitue également une preuve de concept. Plateformes supportées Ubuntu 12.0...

bash-cve-2014-7169-cookbook

bash-cve-2014-7169-cookbook Assure que la vulnérabilité 'shellshock' de bash est corrigée. Basé sur un article de blog écrit par Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...

cookbook-bash-CVE-2014-6271

bash-CVE-2014-6271 쿡북 이 Chef 쿡북에는 기본 레시피가 포함되어 있으며, bash가 발견되고 해당 bash가 CVE-2014-6271에 설명된 원격 익스플로잇에 취약한 경우 Chef 실행이 실패합니다. bash를 찾을 위치는 node'bash-CVE-2014-6271''bashes' 속성에서 구성할 수 있습니다아래 참조. 요구 사항 모든 UNIX/Linux에서 작동합니다. 문제가 있을 경우 보고해 주시기 바랍니다가급적 패치 포함. 속성 node'bash-CVE-2014-6271''bashes' - 취약점을...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

bash-shellshock

bash-shellshock Cookbook Ce cookbook est conçu pour tester et éventuellement corriger le bogue bash « shellshock », plus formellement connu sous le nom de CVE-2014-7169. Une fois que Chef-client a exécuté cette recette sur un ou plusieurs hôtes, une liste de tous les nœuds vulnérables à l'exploit...

regreSSHion

regreSSHion Профиль Chef Inspec для проверки уязвимости regreSSHion CVE-2024-6387 Пожалуйста, измените это в соответствии с вашими потребностями. Это приведено в качестве примера...

CVE-2015-0235-cookbook

CVE-2015-0235-cookbook Этот cookbook проверит, уязвимы ли вы для CVE-2015-0235. Текущее поведение: при ошибке теста будет выдана ошибка: root@kitploit: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end Для систем на основе Debian:...

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

mose

MOSE Master Of SErvers...

chef_tissues

Tissues CVE-2017-0145일명 WannaCry용 패치를 설치합니다. 자세한 정보: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt 사용법: root@kitploit: "name":"mynode", "runlist": "recipetissues"...

EUVD-2026-37955

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

EUVD-2026-37956

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

CVE-2026-8668

CVE-2026-8668 concerns Chef 360 prior to v1.7.0, where a static credential embedded in the product allowed unauthenticated access to internal message queues containing tenant-specific identifiers. The underlying issue is a hardcoded credential that enables access without authentication; later ver...

CVE-2026-8668 Hardcoded credentials in embedded content

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...