128 matches found
bash-cve-2014-7169-cookbook
bash-cve-2014-7169-cookbook Ensures bash 'shellshock' vulnerability is patched. Based on blog post written by Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...
CVE-2014-3566-poodle-cookbook
CVE-2014-3566-poodle Este cookbook lanzará un error en tu ejecución de chef si tu servidor es vulnerable a CVE-2014-3566. Aunque este cookbook puede usarse para monitorear ejecuciones fallidas de chef, también es una prueba de concepto. Plataformas soportadas Ubuntu 12.04 Centos-6.4 Atributos...
netlas-cookbook
Netlas CookBook El objetivo de esta guía es enseñar a cualquier persona interesada en ciberseguridad, independientemente de su nivel de conocimiento, cómo aprovechar al máximo las herramientas de búsqueda de Netlas. Es una lectura extensa. Hemos recopilado la mayor cantidad posible de casos de us...
CVE-2015-0235-cookbook
CVE-2015-0235-cookbook This cookbook will test if you are vulnerable to CVE-2015-0235. Current behavior will error out when test fails: root@kitploit: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end For debian based systems:...
cookbook-bash-CVE-2014-6271
bash-CVE-2014-6271 Cookbook This Chef cookbook contains a default recipe that will fail your Chef run if a bash is found and that bash is vulnerable to the remote exploit described in CVE-2014-6271. The places to look for bash can be configured in the node'bash-CVE-2014-6271''bashes' attribute se...
threat-model-cookbook
OWASP Threat Model Cookbook Project This project is about creating and publishing threat model examples. They can be in the form of code, graphical or textual representations. The models will use diverse technologies, methodologies and techniques. You can learn from those models, use them a base ...
chef_tissues
Tissues Installiert den Patch für CVE-2017-0145, auch bekannt als WannaCry. Weitere Informationen: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Verwendung: root@kitploit: "name":"mynode", "runlist": "recipetissues"...
Windows-Local-Privilege-Escalation-Cookbook
Windows Local Privilege Escalation Cookbook Indice Windows Local Privilege Escalation Cookbook Indice Disclaimer Descrizione Keynote Definizione Strumenti utili Vulnerabilità Riferimenti Disclaimer Questo repository, "Windows Local Privilege Escalation Cookbook", è destinato esclusivamente a scop...
cookbook-update-glibc
cookbook-update-glibc Übersicht Cookbook für das Update von glibc. CVE-2015-0235 GHOST Japanisch http://www.walbrix.com/jp/blog/2015-01-ghost.html Englisch http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Beschreibung Update von glibc mittels Chef Solo. Achtung: Dieses Cookbook...
bash-shellshock
bash-shellshock Cookbook Questo cookbook è progettato per testare e opzionalmente correggere il bug "shellshock" di bash, più formalmente noto come cve-2014-7169. Una volta che Chef-client ha eseguito questa ricetta su uno o più host, è possibile recuperare un elenco di tutti i nodi vulnerabili...
CVE-2026-55747
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747
The CVE-2026-55747 entry concerns the pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow. The root cause is a _path(workdir, p) helper that simply wraps os.path.join(workdir, p) with no canonicalization or containment checks. Because os.path.join can preserve absolute paths and doe...
CVE-2023-31128
NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the master branch and commit 489bb744 on the main-0.9.x branch, the pull-checks.yml workflow is vulnerable to command injection attacks because of using an untrusted github.headref field. The github.headref value is an...
EUVD-2008-1146
Malware in sbrugna...
EUVD-2021-14363
Malware in sbrugna...