mose

MOSE Master Of SErvers...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

Puppet Server/PuppetDB - Sensitive Information Disclosure

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...

imagick_secure_puppet

solo incluye la clase y si imagick existe... reemplazará el policy.xml con una versión base de ubuntu 14.04 ligeramente modificada con políticas adicionales implementadas Ejecutando mediante puppet apply: root@kitploit: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv...

puppet-shellshock

Este módulo determina la vulnerabilidad de un binario bash a los exploits de shellshock CVE-2014-6271 o CVE-2014-7169 y luego lo parchea cuando sea posible. Plataformas soportadas: Debian 5, 6, 7 Ubuntus 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Uso root@kitploit: class 'shellshock': Facter...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...

EUVD-2026-76124

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...

CVE-2026-85979

Puppet Enterprise is affected by a command injection vulnerability in the handling of the java_keystore_passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by supplying a specially crafted value for this parameter, which is passed to a...

CVE-2026-85979 Command Injection in Puppet Enterprise

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

PT-2026-89884

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java keystore passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which ...

puppetlabs-cve20113872

CVE-2011-3872 Remediation Toolkit Este módulo le ayudará a remediar permanentemente la vulnerabilidad CVE-2011-3872 AltNames. Guías de uso Consulte las guías de uso detalladas en: README-detailed.markdown para remediar su sitio con Puppet README-ssh-only.markdown Para remediar su sitio con SSH...

SecGen

EL DESARROLLO SE HA MOVIDO A http://github.com/cliffe/SecGen/, ¡ESTE REPO NO SE MANTIENE Y PROBABLEMENTE NO FUNCIONARÁ! Generador de Escenarios de Seguridad SecGen Resumen SecGen crea máquinas virtuales vulnerables para que los estudiantes puedan aprender técnicas de pruebas de penetración en...

puppet-os-hardening

Puppet OS hardening Table of Contents 1. Module Description - What the module does and why it is useful 2. Setup - The basics of getting started with oshardening Setup Requirements Beginning with oshardening 3. Usage - Configuration options and additional functionality Important for Puppet...

puppet-ssh-hardening

Puppet SSH hardening Description This Puppet module provides secure ssh-client and ssh-server configurations. Requirements Puppet Puppet modules: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Parameters ipv6enabled = false - true if IPv6 is needed...

CVE-2026-66379

An authenticated user may view private Puppet module metadata without repository read access...

UBUNTU-CVE-2026-66379

An authenticated user may view private Puppet module metadata without repository read access...

CVE-2026-66379 Authenticated users may view private Puppet module metadata

An authenticated user may view private Puppet module metadata without repository read access...

EUVD-2026-57248

An authenticated user may view private Puppet module metadata without repository read access...

CVE-2026-66379

CVE-2026-66379 describes an issue where an authenticated user can view private Puppet module metadata without repository read access. The provided documents do not specify affected product/version or the exact root cause. The NVD entry lists CVSS v3.1 base score 4.3 (Medium) with confidentiality ...