SSH-Private-Key-Looting-Wordlists

LFI per Movimento Laterale? Ottenere Accesso SSH? root@kitploit: ?file=../../../../../../../../home/user/.ssh/idrsa ?file=../../../../../../../../home/user/.ssh/idrsa-cert Wordlist per il Furto di Chiavi Private SSH 🔒🗝️ Questo repository contiene una raccolta di wordlist per aiutare a localizzare ...

CVE-2026-53456

In Blueprint Studio versions before 2.5.2, the SSH terminal authentication component in custom_components/blueprint_studio/backend/terminal_manager.py wrote SSH private-key material to a file under the Home Assistant configuration directory, applied restrictive permissions afterward, and relied o...

Malicious code in supplyhub (npm)

The npm package supplyhub is a credential / SSH-key stealer. Its package.json declares a postinstall lifecycle hook postinstall: node postinstall.js that executes automatically on npm install, before the package is ever imported. postinstall.js uses fs.readFileSync to read the user's SSH private...

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

An unknown threat actor has been observed using a large language model LLM agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability. "The attacker compromised an...

EUVD-2016-2412

Malware in sbrugna...

EUVD-2018-9615

Malware in sbrugna...

EUVD-2012-5502

Malware in sbrugna...

EUVD-2019-17222

Malware in sbrugna...

EUVD-2020-28101

Malware in sbrugna...

EUVD-2025-23526

Malicious code in bioql PyPI...

EUVD-2025-22715

Malicious code in bioql PyPI...

EUVD-2023-27049

Malicious code in bioql PyPI...

EUVD-2022-5656

Malicious code in bioql PyPI...

CVE-2025-44954

RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account...

CVE-2025-44954

RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account...

CVE-2025-29630

Gardyn Home Kit Firmware allows a remote attacker with the corresponding ssh private key to achieve remote root access...

CVE-2025-29630

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue; there is no indication that an applicable SSH private key has ever been compromised. Notes: none...

CVE-2025-29630

Summary: CVE-2025-29630 affects Gardyn 4 and enables a remote attacker who possesses the corresponding SSH private key to gain remote root access to affected devices. The vulnerability is characterized by an SSH key backdoor/backdoor-like access enabling total compromise of the device, with high ...

CVE-2025-29630

...

PT-2025-30889 · Gardyn 4 · Gardyn 4

Name of the Vulnerable Software and Affected Versions: Gardyn version 4 Description: An issue in Gardyn 4 allows a remote attacker possessing the corresponding SSH private key to gain remote root access to affected devices. Recommendations: Ensure the SSH private key is securely stored and access...