PuttyRider

PuttyRider Hijack Putty sessions in order to sniff conversation and inject Linux commands. Download PuttyRider-bin.zip Documentation Defcamp 2014 presentation - pdf Defcamp 2014 presentation - video Examples List existing Putty processes and their status injected / not injected PuttyRider.exe -l...

CVE-2024-31497-POC

CVE-2024-31497 POC This vulnerability exploits the biased ECDSA nonce generation in the ecc-ssh.c file. The nonce is generated with $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ leaving the top 9 bits to zero. In order to recover the private key we need 60 signatures but with 58 we still ha...

vuln-chm-hijack

PuTTY vulnerability vuln-chm-hijack Potential malicious code execution via CHM hijacking About Up to and including version 0.70, when you launched the online help in any of the Windows PuTTY GUI tools, the tool would locate its help file by looking alongside its own executable. If you were runnin...

SessionGopher

Copyright 2017 FireEye, created by Brandon Arvanaghi @arvanaghi Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by...

CLEANSTART-2024-SY55239 Potential recycling of random numbers used in cryptography exists within PuTTY before 0

Security vulnerability affects the putty package. Potential recycling of random numbers used in cryptography exists within PuTTY before 0...

CLEANSTART-2024-BC33765 remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0

Security vulnerability affects the putty package. A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0...

CLEANSTART-2024-VD08231 PuTTY 0

Security vulnerability affects the putty package. PuTTY 0...

CLEANSTART-2024-BR70902 PuTTY through 0

Security vulnerability affects the putty package. PuTTY through 0...

CLEANSTART-2024-US97519 In PuTTY 0

Security vulnerability affects the putty package. In PuTTY 0...

CVE-2024-31497

-CVE-2024-31497 A script designed to uncover vulnerabilities in Putty by exploiting CVE-2024-31497...

putty-0.85-2.1 on GA media (moderate)

putty-0.85-2.1 on GA media Announcement ID: openSUSE-SU-2026:12168-1 Rating: moderate Cross-References: CVE-2026-48850 CVE-2026-48851 CVE-2026-48852 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues fixe...

openSUSE 16 Security Update : putty (openSUSE-SU-2026:22127-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22127-1 advisory. Changes in putty: - Update to release 0.85 Fixed a remotely triggerable use-after-free in Pageant. Fixed a remotely triggerable buffer overflow ...

Security update for putty (moderate)

openSUSE security update: security update for putty ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22127-1 Rating: moderate References: bsc1266373 bsc1266374 bsc1266375 Cross-References: CVE-2026-48850 CVE-2026-48851 CVE-2026-48852 Affected Product...

OPENSUSE-SU-2026:22127-1 Security update for putty

This update for putty fixes the following issues: Changes in putty: - Update to release 0.85 Fixed a remotely triggerable use-after-free in Pageant. Fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. Only used if a server supports nothing else...

OPENSUSE-SU-2026:12168-1 putty-0.85-2.1 on GA media

These are all security issues fixed in the putty-0.85-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-117132

These are all security issues fixed in the putty-0.85-2.1 package on the GA media of openSUSE Tumbleweed...

PuTTY Encryption Verification Code Execution

The vulnerability of the PuTTY encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WinRM Gather PuTTY WinSCP FileZilla

Collect PuTTY, WinSCP, and FileZilla saved sessions through WinRM !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.winrm.winrmsessionmixin import WinRMSessionMixin import re class ModulePost, WinRMSessionMixin: info = "name": "WinRM Gather PuTTY WinSCP...

ROS-20260709-73-0032

The vulnerability in Putty is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260707-73-0021

The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...