Puppet Server/PuppetDB - Sensitive Information Disclosure

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

puppet-shellshock

This module determine the vulnerability of a bash binary to the shellshock exploits CVE-2014-6271 or CVE-2014-7169 and then patch that where possible. Supported platforms: Debian 5, 6, 7 Ubuntus 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Usage class 'shellshock': Facter provided facter -p...

imagick_secure_puppet

just include the class and if imagick exists ... it'll blow out the policy.xml with a slightly modified ubuntu 14.04 base version w/ extra policies in place Executing via puppet apply: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv imagicksecurepuppet imagicksecure $ su...

mitigate-cve-2026-98432

mitigate-cve-2026-98432 Temporary Ubuntu/UFW mitigation using Puppet. Drops IPv4 TCP packets carrying IPv4 options, not ordinary TCP options. Ubuntu CVE tracker Red Hat RHSB-2026-016: recommends IPv4 TCP/IP-options filtering; explicitly distinguishes ordinary TCP options. AWS security bulletin...

puppet-ssh-hardening

Puppet SSH hardening Description This Puppet module provides secure ssh-client and ssh-server configurations. Requirements Puppet Puppet modules: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Parameters ipv6enabled = false - true if IPv6 is needed cbcrequired = false - true if CBC for ciphers is...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

puppetlabs-cve20113872

CVE-2011-3872 Remediation Toolkit This module will help you permanently remediate the CVE-2011-3872 AltNames vulnerability. Usage Guides Please see the detailed usage guides at: README-detailed.markdown for remediating your site with Puppet README-ssh-only.markdown For remediating your site with...

CVE-2026-115732

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

SecGen

DEVELOPMENT HAS MOVED TO http://github.com/cliffe/SecGen/, THIS REPO IS NOT MAINTAINED AND WILL LIKELY NOT WORK! Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines so students can learn security penetration testing techniques. Boxes like Metasploitable2 are alwa...

CVE-2026-115731

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted...

trapperkeeper-authorization: puppetserver: openvox-server: openvoxdb: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and,...

puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT...

puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT...

puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT...

trapperkeeper-authorization: puppetserver: openvox-server: openvoxdb: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and,...

puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT...

trapperkeeper-authorization: puppetserver: openvox-server: openvoxdb: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and,...

[SECURITY] [DLA 4884-1] puppet-agent security update

Debian LTS Advisory DLA-4884-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón November 05, 2026 https://wiki.debian.org/LTS Package : puppet-agent Version : 7.23.0-1+deb12u1 CVE ID : not yet available It was discovered that missing validation of event data ...