vuln-list-redhat

vuln-list-redhat Red Hat security advisories...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 detector scanner playbook Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script for Log4Shell CVE-2021-44228. Red Hat version 1.3 detector 2022-01-10. The result is saved in a txt file under detectordir default: /opt/cve-2021-44228/...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

Log4Jolokia

Log4Jolokia Description: Python3 implementation for leveraging and exploiting Log4J MBeans over Jolokia Usage: Generic Help: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target target...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

CVE-2018-14665

CVE-2018-14665 Here you can find my analisys and PoC for most used Linux distribution. For now i started from Redhat, this is the link for the official RHSA RHSA-2018:3410...

Red Hat JBoss - Web/JMX Console Access

Red Hat JBoss Enterprise Application Platform EAP can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise. id: CVE-2010-1428 info: name: Red Hat JBoss -...

RHEA-2013:1392 Red Hat Enhancement Advisory: Red Hat Satellite Proxy 5.6.0 General Availability

Bulletin has no description...

CVE-2026-31431

CVE-2026-31431 Introduction Run with: ansible-playbook -v -i environment/production/inventory --timeout=1 playbook.yml Links https://copy.fail https://vulners.com/cve/CVE-2026-31431 https://access.redhat.com/security/cve/cve-2026-31431 https://security-tracker.debian.org/tracker/CVE-2026-31431...

EUVD-2026-125142

A flaw was found in Red Hat Quay. The v1 registry API error handler reflects the attacker-supplied imageid path segment in a response served as text/html, allowing a reflected cross-site scripting XSS attack. By tricking a user into visiting a specially crafted URL, a remote attacker can execute...

CVE-2026-128824

A flaw in Red Hat Quay allows for a reflected cross-site scripting (XSS) attack due to an improper neutralization of input in the v1 registry API error handler . The vulnerability occurs when the application reflects an attacker-supplied image_id path segment in a response served as text/html . B...

CVE-2026-128824

A flaw was found in Red Hat Quay. The v1 registry API error handler reflects the attacker-supplied imageid path segment in a response served as text/html, allowing a reflected cross-site scripting XSS attack. By tricking a user into visiting a specially crafted URL, a remote attacker can execute...

Exploit for CVE-2026-107360

CVE-2026-107360 — rubygem-safemode compound-assignment Jail al...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.9 security update

Red Hat Advanced Cluster Management for Kubernetes v2.15 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.7 security update

Red Hat Advanced Cluster Management for Kubernetes v2.14 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.8 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.9.9 security update

Red Hat multicluster engine for Kubernetes v2.9 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: Satellite 6.17.13 Async Update

An update is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Critical: Red Hat Security Advisory: Satellite 6.18.11 Async Update

A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Critical: Red Hat Security Advisory: Satellite 6.16.15 Async Update

An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...