puppet-shellshock

Ce module détermine la vulnérabilité d'un binaire bash aux exploits shellshock CVE-2014-6271 ou CVE-2014-7169 puis le corrige si possible. Plateformes supportées : Debian 5, 6, 7 Ubuntus 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Utilisation class 'shellshock': Fourni par Facter facter -p...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

imagick_secure_puppet

inclure simplement la classe et si imagick existe... il va faire sauter le policy.xml avec une version de base Ubuntu 14.04 légèrement modifiée avec des politiques supplémentaires en place Exécution via puppet apply : $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv...

SecGen

Générateur de scénarios de sécurité SecGen Résumé SecGen crée des machines virtuelles vulnérables, des environnements de laboratoire et des défis de piratage, afin que les étudiants puissent apprendre les techniques de tests de pénétration en sécurité. Des boîtes comme Metasploitable2 sont toujou...

Puppet Server/PuppetDB - Sensitive Information Disclosure

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

puppetlabs-cve20113872

CVE-2011-3872 Boîte à outils de remédiation Ce module vous aidera à remédier de manière permanente à la vulnérabilité AltNames CVE-2011-3872. Guides d'utilisation Veuillez consulter les guides d'utilisation détaillés à : README-detailed.markdown pour remédier à votre site avec Puppet...

SecGen

LE DÉVELOPPEMENT A ÉTÉ DÉPLACÉ VERS http://github.com/cliffe/SecGen/, CE DÉPÔT N'EST PLUS MAINTENU ET NE FONCTIONNERA PROBABLEMENT PAS ! Générateur de scénarios de sécurité SecGen Résumé SecGen crée des machines virtuelles vulnérables pour que les élèves puissent apprendre les techniques de test ...

puppet-os-hardening

Укрепление ОС с помощью Puppet 1 1 1 2 Содержание 1. Описание модуля — что делает модуль и почему он полезен 2. Установка — основы начала работы с oshardening Требования к установке Начало работы с oshardening 3. Использование — параметры конфигурации и дополнительные функции Важно для Puppet...

puppet-ssh-hardening

Puppet SSH hardening Описание Этот модуль Puppet обеспечивает безопасные конфигурации ssh-client и ssh-server. Требования Puppet Модули Puppet: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Параметры ipv6enabled = false - true, если требуется IPv6 cbcrequired = false - true, если требуется CBC для...

Linux Distros Unpatched Vulnerability : CVE-2026-85979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitra...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

UBUNTU-CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

EUVD-2026-76124

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...

CVE-2026-85979 Command Injection in Puppet Enterprise

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

CVE-2026-85979

Puppet Enterprise is affected by a command injection vulnerability in the handling of the java_keystore_passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by supplying a specially crafted value for this parameter, which is passed to a...

CVE-2026-85979 Command Injection in Puppet Enterprise

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

PT-2026-89884

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions 2023.8.0 through 2023.8.10 Puppet Enterprise versions 2025.0.0 through 2025.11.2 Description An authenticated user with administrative privileges can execute arbitrary shell commands by providing a specially crafted...