puppet-shellshock

This module determine the vulnerability of a bash binary to the shellshock exploits CVE-2014-6271 or CVE-2014-7169 and then patch that where possible. Supported platforms: Debian 5, 6, 7 Ubuntus 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Usage class 'shellshock': Facter provided facter -p...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

SecGen

DEVELOPMENT HAS MOVED TO http://github.com/cliffe/SecGen/, THIS REPO IS NOT MAINTAINED AND WILL LIKELY NOT WORK! Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines so students can learn security penetration testing techniques. Boxes like Metasploitable2 are alwa...

Puppet Server/PuppetDB - Sensitive Information Disclosure

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...

puppet-ssh-hardening

Puppet SSH hardening Description This Puppet module provides secure ssh-client and ssh-server configurations. Requirements Puppet Puppet modules: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Parameters ipv6enabled = false - true if IPv6 is needed cbcrequired = false - true if CBC for ciphers is...

imagick_secure_puppet

just include the class and if imagick exists ... it'll blow out the policy.xml with a slightly modified ubuntu 14.04 base version w/ extra policies in place Executing via puppet apply: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv imagicksecurepuppet imagicksecure $ su...

puppetlabs-cve20113872

CVE-2011-3872 Remediation Toolkit This module will help you permanently remediate the CVE-2011-3872 AltNames vulnerability. Usage Guides Please see the detailed usage guides at: README-detailed.markdown for remediating your site with Puppet README-ssh-only.markdown For remediating your site with...

Moderate: Red Hat Security Advisory: Satellite 6 Client Update

Updated Satellite Client packages that fix several bugs are now available for Red Hat Satellite. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 10 / 7 / 8 / 9 : Satellite 6 Client Update (Moderate) (RHSA-2026:85249)

The remote Redhat Enterprise Linux 10 / 7 / 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:85249 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessi...

puppet-os-hardening

Puppet OS hardening 1 1 1 2 Indice 1. Descrizione del modulo - Cosa fa il modulo e perché è utile 2. Setup - Le basi per iniziare con oshardening Requisiti di Setup Iniziare con oshardening 3. Utilizzo - Opzioni di configurazione e funzionalità aggiuntive Importante per Puppet Enterprise Parametr...

perceval-opnfv (>=0.2.2rc1, <=0.2.2rc2), perceval-puppet (>=0.2.2rc1, <=0.2.2rc2) +1 more potentially affected by unknown CVE via dulwich (0.20.34)

dulwich PYPI version 0.20.34 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-opnfv =0.2.2rc1, =0.2.2rc1, =0.2.2rc1, =0.2.2rc2 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

perceval-opnfv (>=0.2.2rc1, <=0.2.2rc2), perceval-puppet (>=0.2.2rc1, <=0.2.2rc2) +1 more potentially affected by unknown CVE via dulwich (0.20.34)

dulwich PYPI version 0.20.34 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-opnfv =0.2.2rc1, =0.2.2rc1, =0.2.2rc1, =0.2.2rc2 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

Linux Distros Unpatched Vulnerability : CVE-2026-85979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitra...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

UBUNTU-CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without...

EUVD-2026-76124

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...