PuttyRider

PuttyRider Перехватывайте сессии Putty для прослушивания диалогов и внедрения команд Linux. Загрузка PuttyRider-bin.zip Документация Презентация Defcamp 2014 - pdf Презентация Defcamp 2014 - видео Примеры Вывод списка существующих процессов Putty и их статуса внедрён / не внедрён root@kitploit:...

vuln-chm-hijack

Уязвимость PuTTY vuln-chm-hijack Возможное выполнение вредоносного кода через перехват CHM Описание Начиная с версии 0.70 и ранее, при запуске онлайн-справки в любом из графических инструментов PuTTY для Windows, инструмент искал свой файл справки рядом со своим собственным исполняемым файлом. Ес...

SessionGopher

Авторские права 2017 FireEye, создано Brandon Arvanaghi @arvanaghi Лицензировано на условиях Apache License, Version 2.0 далее — «Лицензия»; вы не можете использовать этот файл, кроме как в соответствии с Лицензией. Вы можете получить копию Лицензии по адресу root@kitploit:...

CVE-2024-31497-POC

CVE-2024-31497 POC Эта уязвимость использует смещенную генерацию nonce ECDSA в файле ecc-ssh.c. Nonce генерируется как $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$, при этом старшие 9 бит равны нулю. Для восстановления закрытого ключа необходимо 60 сигнатур, но при 58 вероятность успеха вс...

CVE-2024-31497

-CVE-2024-31497 CVE-2024-31497 を利用して Putty の脆弱性を発見するために設計されたスクリプト。...

The vulnerability of the PuTTY encryption protection mechanism lies in its insufficient verification of data authenticity, allowing attackers to execute arbitrary code.

The vulnerability of the PuTTY encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MGASA-2026-0210 Updated putty packages fix security vulnerabilities

ECDSA signature verification can be made to fail an assertion. Server can provoke a double free in RSA KEX code. Telnet session data is marked with trust sigils after authenticating to a proxy. PuTTY Ed25519 Signature ecc-ssh.c eddsaverify signature verification. CVE-2026-4115...

[SECURITY] Fedora 43 Update: putty-0.84-1.fc43

Putty is a SSH, Telnet & Rlogin client - this time for Linux...

[SECURITY] Fedora 44 Update: putty-0.84-1.fc44

Putty is a SSH, Telnet & Rlogin client - this time for Linux...

Fedora 44 : putty (2026-1ab61e6e20)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1ab61e6e20 advisory. This is an update fixing several security related problems in putty. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : putty (2026-61f53cc218)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-61f53cc218 advisory. This is an update fixing several security related problems in putty. Tenable has extracted the preceding description block directly from the Fedora...

The vulnerability of the Telnet protocol implementation in the cryptographic security tool PuTTY, which allows attackers to perform spoofing attacks

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the ssh_rsakex_freekey() function in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.

The vulnerability of the sshrsakexfreekey function in the PuTTY cryptographic protection tool is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the ECDSA algorithm (Elliptic Curve Digital Signature Algorithm) in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.

The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

openSUSE 16 Security Update : putty (openSUSE-SU-2026:20851-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20851-1 advisory. Changes in putty: - Update to release 0.84 Fixed a remotely triggerable double-free in RSA key exchange. Fixed a remotely triggerable crash assertion...

OPENSUSE-SU-2026:20851-1 Security update for putty

This update for putty fixes the following issues: Changes in putty: - Update to release 0.84 Fixed a remotely triggerable double-free in RSA key exchange. Fixed a remotely triggerable crash assertion failure - program termination in NIST ECDSA signature verification. Fixed marking of Telnet and...

SUSE CVE-2026-48850

PuTTY 0.72 before 0.84 has a double free in RSA KEX...

SUSE CVE-2026-48851

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session...

SUSE CVE-2026-48852

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification...

Linux Distros Unpatched Vulnerability : CVE-2026-48851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and...