Skip to content

A repo containing some built puppet modules for SecGen

License

Notifications You must be signed in to change notification settings

JD2344/SecGen_Exploits

Repository files navigation

What is this?

It contains numerous exploits for the SecGen Project.

Exploits include:

- Nanocms RCE - ✓
- Apache Spark (cve_2022_33891) - ✓
- Apache Druid RCE (cve-2021-25646) - ✓
- GLPI htmLawed php command injection (CVE-2022-35914) - ✓
- Jenkins CLI Deserialization - v2.56 and below (CVE-2017-1000353) - ✓
- LinuxKI Toolset 6.01 Remote Command Execution (CVE-2020-7209) - ✓
- Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH) (CVE-2004-2466) - ✓
- Lucee (CVE 2021-21307) - ✓
- Nagios XI (CVE CVE-2021-37343)
- Windows EternalBlue (2017-0143) - ✓
- OpenTSDB (CVE-2020-35476) - ✓
- TikiWiki Calendar Command Execution (Authenticated) - ✓
- TikiWiki Calendar Command Execution (Unauthenticated) - ✓

Whats Puppet_modules

Contains various setup/modules for when puppet is applied.

About

A repo containing some built puppet modules for SecGen

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published