7623 matches found
CLSA-2025-1761673667 Fix CVE(s): CVE-2019-20044
SECURITY UPDATE: insecure privilege dropping vulnerability - debian/patches/CVE-2019-20044-.patch: improve error handling in setopt command, add OpenSSH-based setresuid/setresgid wrappers, simplify and secure privilege dropping logic, add comprehensive tests for PRIVILEGED option - CVE-2019-20044...
Exploit for Race Condition in Openbsd Openssh
CVE-2018-15473-Exploit Updated version with modern Python/P...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2025-988576)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988576 advisory. ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when ...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2025-988578)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988578 advisory. ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when ...
PT-2025-46070
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...
The vulnerability of the ssh component in the OpenSSH cryptographic security tool allows a hacker to execute arbitrary code.
The vulnerability of the ssh component in the OpenSSH cryptographic protection mechanism is related to improper handling of special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...
OpenSSH < 10.1 / 10.1p1 Multiple Vulnerabilities
The version of OpenSSH installed on the remote host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities: - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a...
JLSEC-2025-8 ssh in OpenSSH before 10.1 allows the '`\0`' character in an `ssh://` URI, potentially leading to code...
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
PT-2025-46054
ssh in OpenSSH before 10.1 allows the '0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
PT-2025-46043
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)
...
The vulnerability of the ProxyCommand component of the OpenSSH cryptographic protection tool, which allows a hacker to execute arbitrary code.
The vulnerability of the ProxyCommand component in the OpenSSH cryptographic security tool is related to the insertion of a zero byte %00 into the username string. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SUSE CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
SUSE CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
Exploit for CVE-2025-61984
CVE-2025-61984 PoC This is a proof of concept using a newline...
EUVD-2010-5067
Malware in sbrugna...
EUVD-2019-15676
Malware in sbrugna...
EUVD-2000-0532
Malware in sbrugna...