egression

Descripción EGRESSION es una herramienta que proporciona una vista instantánea de lo fácil que es subir datos sensibles desde cualquier red. Comienza con un archivo sensible con estos contenidos, que se almacena localmente en texto plano. Este archivo se utiliza para probar los controles de...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

CVE-2016-2434

CVE-2016-2434...

reverse_ssh

Reverse SSH Crédito artístico a https://www.instagram.com/smart.hedgehog.art/ ¿Quieres usar SSH para shells reversas? Ahora puedes. Administra y conéctate a shells reversas con la sintaxis nativa de SSH Reenvío dinámico, local y remoto Implementaciones nativas de SCP y SFTP para recuperar archivo...

CVE-2026-78254

A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lea...

CVE-2020-15778

Informe sobre el CVE id CVE-2020-15778. Descubierto por: Chinmay Pandya Dirección de correo electrónico: [email protected] LinkedIn: www.linkedin.com/in/chinmay-pandya Título de la vulnerabilidad: scp en OpenSSH 8.3p1 permite inyección de eval. Producto: Openssh...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – Vulnerabilidad de Inyección de Comandos en OpenSSH SCP Script de Detección Acerca de CVE-2020-15778 es una vulnerabilidad de inyección de comandos descubierta en la utilidad scp proporcionada por OpenSSH versiones ≤ 8.3p1. El problema permite a un atacante ejecutar comandos...

Go-SCP

Puedes descargar este libro en los siguientes formatos: PDF, Mobi y ePub. Introducción Go Language - Prácticas de Codificación Segura para Aplicaciones Web es una guía escrita para cualquier persona que utilice el Lenguaje de Programación Go y que tenga como objetivo usarlo para el desarrollo web...

DEBIAN-CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...

Linux Distros Unpatched Vulnerability : CVE-2026-78254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the...

CVE-2020-15778

CVE-2020-15778 Introducción Este repositorio reproduce CVE-2020-15778. Pasos 1. Construye las imágenes docker para el servidor scp y el cliente root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Levanta el servidor scp en un contenedor...

CVE-2026-82859

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...

CVE-2026-82859

hulumi versions before v1.3.2 contain a flawed deployment SCP template that permits tag-on-create bypasses against hulumi:iac-role protections, allowing attackers to circumvent intended IAM boundary restrictions in downstream deployments. The vulnerability is scored CVSS 3.1: 9.8 (CRITICAL) and C...

EUVD-2026-68447

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...

CVE-2026-82859 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...

CVE-2026-82859 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...

GHSA-2WXC-X7RJ-HG8F asyncssh has SCP Path Traversal to Arbitrary File Write

| | | |---|---| | Product | asyncssh all versions through 2.23.0 | | Related | CVE-2019-6111 same class in OpenSSH | | Fix | AsyncSSH 2.23.1 | A malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences. The SCP...