sshfinder

sshfinder 发现网络上的每一个 SSH 服务，判断其是否符合你的标准，并在发生变化时收到通知。 sshfinder 是一个无第三方依赖的单一 Python 文件。将其指向一个 CIDR 网段，它就能发现 SSH 实际监听的任何位置——不仅仅是 22 端口——确认每个服务确实在运行 SSH 协议，评估其加密安全态势，并在有服务不符合你的策略时返回非零退出码。 它解决的问题 大多数团队无法回答关于自身 SSH 资产状况的三个问题： 1. 我们有多少 SSH 服务，它们在哪里？ 不是问有多少台机器——而是问有多少个 正在监听的 SSH 服务 ，包括那个承包商在 2019 年搭建在 22...

CVE-2023-48795

CVE-2023-48795 用 OpenSSH 脆弱性スキャナ このPythonベースのツールは、システムのOpenSSHインストールをスキャンし、CVE-2023-48795 （OpenSSH 9.6 より前のバージョンに影響する重大な脆弱性）に対して脆弱かどうかをチェックします。スクリプトは、スキャンされたシステムの詳細なレポートを提供し、脆弱性が見つかった場合はアップグレードの推奨事項を含みます。 CVE-2023-48795: 脆弱性の概要 CVE ID : CVE-2023-48795 説明 : OpenSSH...

Scanner_CVE_OpenSSH

用于识别可能受 CVE-2024-6387 和 CVE-2023-48795 影响的 SSH 软件服务器的扫描器。 覆盖的 CVE CVE| 名称| 条件| 严重性 ---|---|---|--- CVE-2024-6387| regreSSHion| OpenSSH dnspython 是可选的，但强烈推荐——使用它可以显著提高并行反向解析的速度。如果没有 dnspython，脚本会回退使用 socket。 使用方法 root@kitploit: 单个 IP python sshscanner.py --ip 192.168.1.10 CIDR 范围 python...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py 一个用于检测 CVE-2023-48795 的轻量级 Python 扫描器——SSH Terrapin 前缀截断漏洞。 Terrapin 是 SSH 中的一个协议级漏洞，允许主动中间人（MitM）攻击者截断协商后的扩展信息，从而降低连接安全性——最严重的情况下会禁用 ext-info（用于服务器签名算法）和 ping（用于 OpenSSH 的 no-auth 扩展）。 📋 目录 关于本漏洞 工作原理 环境要求 安装 使用方法 输出 存在漏洞的条件 修复建议 免责声明 关于本漏洞 字段| 详情 ---|--- CVE| CVE-2023-48795 CVS...

Photon OS 5.0: Openssh PHSA-2024-5.0-91-0188

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0188. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Erlang PHSA-2024-5.0-91-0188

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0188. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2024-5.0-91-0187

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHCOS 4 : OpenShift Container Platform 4.14.30 (RHSA-2024:3918)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3918 advisory. - ssh: Prefix truncation attack on Binary Packet Protocol BPP CVE-2023-48795 Note that Nessus has not tested for this issue but has instead...

Photon OS 4.0: Openssh PHSA-2026-4.0-0985

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0985. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mageia: Security Advisory (MGASA-2026-0066)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated trilead-ssh2 packages fix security vulnerabilities

CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack...

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by incorrect validation of integrity check due to OpenSSH

Summary OpenSSH is used by IBM Operations Analytics - Log Analysis as part of implementations of SSH servers and clients. CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other...

Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM

Summary Multiple vulnerabilities were addressed in IBM QRadar SIEM version 7.5.0 UP14 IF02 Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrit...

TencentOS Server 4: openssh (TSSA-2024:0950)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0950 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Advisory ROSA-SA-2025-3074

Software: openssh 8.0p1 OS: ROSA Virtualization 2.1 unaffected versions = openssh-8.0p1-26.0.1.1.rv3 affected versions openssh-8.0p1-26.0.1.1.rv3 CVE-ID: CVE-2020-15778 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A vulnerability in the toremote scp.c function of the OpenSSH cryptographic security tool exis...

CVE-2023-48795 affecting package podman for versions less than 5.6.1-2

CVE-2023-48795 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

ProFTPD < 1.3.8b OpenSSH Terrapin Attack

ProFTPD is prone to the SSH SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; ifdescription...

TencentOS Server 3: openssh (TSSA-2024:0051)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0051 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: libssh (TSSA-2024:0056)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0056 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...