1563 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64620
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard...
Exploit for CVE-2026-63030
wp2shell \CVE-2026-63030/CVE-2026-60137 Pre Authentication...
OESA-2026-3016 libssh2 security update
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...
OESA-2026-3015 libssh2 security update
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...
Exploit for CVE-2026-60137
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
Exploit for CVE-2026-63030
wp2shell Pre-Authentication Remote Code Execution in WordPres...
Exploit for CVE-2026-63030
CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read t...
Exploit for CVE-2026-63030
wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...
wp2shell
wp2shell Pre-authentication RCE exploit for WordPress Core RE...
Exploit for CVE-2026-60137
wp2shell-lab Educational PoC and lab for CVE-2026-63030 + C...
Exploit for CVE-2026-63030
WordPress REST API Batch Route Confusion + SQL Injection → RCE...
GO-2026-5962 File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) in github.com/filebrowser/filebrowser
File Browser: Command Injection via Authentication Hook Shell Substitution Pre-Authentication RCE in github.com/filebrowser/filebrowser...
CVE-2026-45309 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...
CVE-2026-45309
CVE-2026-45309 affects AsyncSSH prior to 2.23.0. Root cause: the OpenSSH-style token %u in AuthorizedKeysFile was expanded from the remote username without rejecting path separators or .. segments, letting a username such as with traversal characters read an attacker-controlled authorized-keys fi...
CVE-2026-45309 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...
SUSE-SU-2026:3082-1 Security update for libssh2_org
This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530...
SUSE-SU-2026:3076-1 Security update for libssh2_org
This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530...
SUSE-SU-2026:3074-1 Security update for libssh2_org
This update for libssh2org fixes the following issue Security changes: - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530. Other changes: - rebuild libssh2org against openssl 1.1.1, enabling ed25519 support. bsc1227490...
SUSE CVE-2026-58250
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with compression enabled could crash the server during the pre-authentication leafnode handshake by...
