opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

CVE-2025-32433

CVE-2025-32433 Introduction This document presents a study of the vulnerability CVE-2025-32433 , affecting the built-in SSH server implementation in the Erlang/OTP platform. This vulnerability is a Remote Code Execution RCE opportunity without authentication and affects several Erlang/OTP branche...

CVE-2024-45337

Proof of Concept exploit for CVE-2024-45337 This repository contains a proof of concept exploit for CVE-2024-45337. It can be used to wrap ssh when interacting with an SSH server which is implemented using golang.org/x/crypto = v0.30.0. while caching permissions in the...

CVE-2026-103059

A flaw was found in Gitea. When the built-in Secure Shell SSH server is enabled, public keys are evaluated using a case-insensitive comparison on certain database systems. A remote attacker who constructs a case variant of an existing user's registered public key and possesses the corresponding...

pyrexecd

PyRexecd PyRexecd est un serveur SSH autonome pour Windows. Fonctionnalités : Application Win32 autonome pas un service qui réside dans la barre d'état système. Prend en charge un seul utilisateur / authentification par clé publique uniquement. Notifie les connexions entrantes via une fenêtre...

CVE-2026-103059

When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...

EUVD-2026-93906

When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...

CVE-2026-103059 Gitea built-in SSH server authentication bypass through key case folding

When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...

CVE-2026-103059 Gitea built-in SSH server authentication bypass through key case folding

When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...

CVE-2026-103059 Gitea built-in SSH server authentication bypass through key case folding

When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...

CVE-2026-103059

A flaw in Gitea allows an authentication bypass when the built-in SSH server is enabled (START_SSH_SERVER = true). The root cause is the use of an SQL LIKE comparison for looking up public keys, which is case-insensitive on certain databases like SQLite . An attacker who can construct a case vari...

CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC This repository contains a Proof of Concept PoC for CVE-2025-8110, a Remote Code Execution RCE vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the sshCommand configuration. Usage To run t...

CLEANSTART-2026-YR68258 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

CVE-2026-46595 affects multiple packages. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped. See references for individual vulnerability...

CLEANSTART-2026-FO00940 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

CVE-2026-39828 affects multiple packages. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. See reference...

PT-2026-107169

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description When the built-in SSH server is enabled via the START SSH SERVER variable, the system performs a lookup of the presented public key using an SQL LIKE comparison of its encoded content. Because...

cve-2025-32433

Build » git clone https://github.com/0xPThree/cve-2025-32433.git && cd cve-2025-32433 » docker build -t erlang-ssh . » docker run -d --name erlang-ssh -p 2222:2222 erlang-ssh POC kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port...

CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...

cve-2025-32433

CVE-2025-32433 - Pre-Auth RCE in Erlang/OTP SSH Server Link to detailed write-up All considered vulnerable versions using Docker: Erlang/OTP-25.3.2 Erlang/OTP-26.2.5.11 Erlang/OTP-27.3.2 Link to exploit Links to files for mass scanning: Template for active scanning Template for passive scanning...

puppet-ssh-hardening

Puppet SSH hardening Description This Puppet module provides secure ssh-client and ssh-server configurations. Requirements Puppet Puppet modules: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Parameters ipv6enabled = false - true if IPv6 is needed cbcrequired = false - true if CBC for ciphers is...