EUVD-2018-18270

Malware in sbrugna...

EUVD-2022-4268

Malicious code in bioql PyPI...

EUVD-2023-0468

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2015-1426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node...

Linux Distros Unpatched Vulnerability : CVE-2014-3248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera...

CVE-2022-25350

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

OPENSUSE-SU-2024:10565-1 ruby2.2-rubygem-facter-2.4.6-2.1 on GA media

These are all security issues fixed in the ruby2.2-rubygem-facter-2.4.6-2.1 package on the GA media of openSUSE Tumbleweed...

Puppet Config Gather

This module will grab Puppet config files, credentials, host information, and file buckets. Module Options msf use post/linux/gather/puppet msf postpuppet show actions ...actions... msf postpuppet set ACTION msf postpuppet show options ...show and set options... msf postpuppet run This module...

SUSE CVE-2014-9568

puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter...

SUSE CVE-2015-1426

Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node...

SUSE CVE-2018-6508

Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the factertask or puppetconf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this...

Command Injection in puppet-facter

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

GHSA-G5QR-XGG7-8Q2W Command Injection in puppet-facter

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

CVE-2022-25350

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

Command injection

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

node-puppet-facter 安全漏洞

node-puppet-facter is an open source Node.JS module for Facter by OlinData. A security vulnerability exists in puppet-facter that stems from the getFact function not properly cleaning up data data...

CVE-2022-25350

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

CVE-2022-25350

CVE-2022-25350 affects the Node.js module puppet-facter . The vulnerability is a command injection in the getFact function caused by improper input sanitization . It is a local attack with high impact on confidentiality, integrity, and availability (CVSS 3.1 base 7.8). Affected: all versions (no ...

CVE-2022-25350

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...

PT-2023-12788 · Puppet · Puppet-Facter

Name of the Vulnerable Software and Affected Versions: puppet-facter versions all Description: The issue is related to Command Injection via the getFact function due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated number of...