UBUNTU-CVE-2025-15224

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

PT-2026-20975

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description The software contains an issue related to improper sanitation of paths received from SCP servers. This could potentially lead to security consequences. Recommendations At the moment, there is ...

PT-2026-20977

Name of the Vulnerable Software and Affected Versions libssh-config versions prior to 0.11.4-1.1 Description A buffer underflow issue exists in the ssh get hexa function when processing invalid input. This can potentially lead to unexpected behavior or compromise the system. Recommendations Updat...

PT-2026-20979

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.11.4-1.1 Description A denial of service condition can occur due to a malformed SFTP message. Recommendations Update to version 0.11.4-1.1 or later...

TencentOS Server 3: libssh (TSSA-2022:0067)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0067 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Siemens SIMATIC S7-1500 Improper Neutralization of Special Elements used in an OS Command (CVE-2020-15778)

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of anomalous argument transfers because that could stand a great...

The vulnerability of the FilenameHandler component in the scp.c file of the SSH session management software package Dropbear allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FilenameHandler component in the scp.c file of the SSH session management software package is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...

F5 Networks BIG-IP : BIG-IP SCP and SFTP vulnerability (K000151902)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151902 advisory. When running in Appliance mode, a highly privileged authenticated attacker with access to Secu...

EUVD-2019-3795

Malware in sbrugna...

EUVD-2018-8592

Malware in sbrugna...

EUVD-2019-16238

Malware in sbrugna...

EUVD-2019-5997

Malware in sbrugna...

EUVD-2007-6150

Malware in sbrugna...

EUVD-2020-4897

Malware in sbrugna...

EUVD-2018-13231

Malware in sbrugna...

EUVD-2002-1452

Malware in sbrugna...

EUVD-2018-1102

Malware in sbrugna...

EUVD-2019-3793

Malware in sbrugna...

EUVD-2009-0640

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2025-985008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-985008 advisory. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the...