483 matches found
Log4j-Updater
Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in. log4jupdater.sh is a simple bash script with the a...
Corelight-Ansible-Roles
Corelight-Ansible-Roles Caution: Before you run this version, if you are upgrading, some variable names and locations have changed To get started, simply run this command: source curl https://raw.githubusercontent.com/corelight/Corelight-Ansible-Roles/main/download-run-me-first.sh This product...
openwrt
OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows yo...
combobulator
Dependency Combobulator Dependency Combobulator es un framework de código abierto, modular y extensible para detectar y prevenir fugas de confusión de dependencias y posibles ataques. Esto facilita un enfoque holístico para garantizar lanzamientos de aplicaciones seguros que pueden evaluarse fren...
rex-sec-glibc
rex-ossec-base setup Actualizará los archivos glibc según sea necesario. check Verificará los paquetes glibc tal como están. root@kitploit: task "setup", make Rex::Collectd::Base::setup; ;...
confused
Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...
packman
packman A documentation and tracking project with the goal of making package management systems more secure. See issues for a very rough list of a few of the related issues we have seen. Table Of Package Management Systems...
heimdall_webserver
ATENCIÓN, este proyecto está en versión beta, hay muchos errores y problemas, si quieres ayudar al proyecto úsalo en un laboratorio, no en tu entorno real. NO, aún no está implementado HTTPS, llegará en la próxima actualización Heimdall Es una herramienta para gestionar paquetes vulnerables en tu...
katoolin3
katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...
xz-utils-backdoor-case-study
XZ Utils Backdoor Technical Case Study — How Maintainer Trust Became a Supply-Chain Execution Path When maintainer trust became the attack path. Overview...
chef-os-hardening
os-hardening cookbook Chef Description Ce cookbook fournit de nombreuses configurations liées à la sécurité, offrant une protection de base complète. Il configure : La gestion des paquets, par exemple en n'autorisant que les paquets signés La suppression des paquets présentant des problèmes connu...
[SECURITY] Fedora 44 Update: PackageKit-1.4.0-1.fc44
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
[SECURITY] Fedora 45 Update: PackageKit-1.4.0-1.fc45
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
EUVD-2026-66387
TarsWeb enforces its per-application roles by calling AuthService from individual controller methods, and four methods in app/controller/patch/PatchController.js make no such call. uploadAndPublish accepts a package upload and then builds and dispatches a deployment task to every server matching...
Astra Linux – Vulnerability in rpm
A flaw was discovered in RPM’s signature check functionality when reading a package file. This flaw allows an attacker who can persuade a victim to install a seemingly verifiable package, whose signature header was modified, to cause corruption of the RPM database and execute malicious code. The...
DEBIAN-CVE-2026-74532
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...
DEBIAN-CVE-2026-74331
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, fwpmnotify calls...
DEBIAN-CVE-2026-72030
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent positioning ranges count atadevconfigcpr takes the number of range descriptors from buf0 of the concurrent positioning ranges log up to 255, which the device reports independently of...
