Lucene search
+L

8 matches found

EUVD
EUVD
added yesterday6 views

EUVD-2026-53584

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...

9.9CVSS5.7AI score
SaveExploits0References2
CVE
CVE
added yesterday18 views

CVE-2026-70615

Boringproxy 0.10.0 is affected by a newline injection in the tunnel-creation endpoint’s domain parameter, enabling authenticated, low-privilege users with tunnel-creation permission to inject lines into the SSH authorized_keys file. This may allow insertion of an unrestricted public key, granting...

9.9CVSS5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/09 10:16 p.m.28 views

Malicious code in proxy-check-i (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da390c130eb840eb129a5d43faf0a64a0f0f602070243613aa0e2f8ea8f6d04 The package advertises itself as a wrapper for a 'qsshd executable' but the bundled Go binary is a reverse-SSH daemon that grants a remote operator...

6.3AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/03/18 4:29 p.m.320 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2026/03/18 3:11 p.m.241 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS6AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2026/03/18 12:29 p.m.261 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7AI score0.70721EPSS
SaveExploits11
Cvelist
Cvelist
added 2026/01/07 8:8 p.m.31 views

CVE-2025-66620 Columbia Weather Systems MicroServer Command Shell in Externally Accessible Directory

An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the fil...

8.6CVSS0.00415EPSS
SaveExploits0References2
zdt
zdt
added 2013/12/07 12:0 a.m.136 views

D-Link DSR Router Series - Remote Root Shell Exploit

This is a brief overview of the unauthenticated non-persistent remote root shell vulnerability in various D-Link DSR routers. Versions affected include D-Link DSR-150 Firmware v1.08B44, D-Link DSR-150N Firmware v1.05B64, D-Link DSR-250 and DSR-250N Firmware v1.08B44, D-Link DSR-500 and DSR-500N...

10CVSS9.2AI score0.09783EPSS
SaveExploits8
Rows per page
Query Builder