CLEANSTART-2026-MP17411 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the consul package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

CLEANSTART-2026-DB21450 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

Security vulnerability affects the consul package. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded...

SECURITY-3314-3315

= Atténuation de SECURITY-3314/SECURITY-3315 Ce dépôt documente les atténuations empêchant l'exploitation de SECURITY-3314 et SECURITY-3315 sur les instances concernées. == Aperçu L'accès à la CLI doit être désactivé. Les deux étapes suivantes doivent être effectuées : Supprimer le point de...

CVE-2024-6387

EXPLOIT CVE-2024-6387 💥 EXPLOIT CVE-2024-6387 regreSSHion Outil d'analyse, de détection et de tests contrôlés de la vulnérabilité CVE-2024-6387 sur les serveurs OpenSSH. ⚠️ Aviso Legal y Ético Ce dépôt est exclusivement éducatif. Utilisez-le uniquement sur : Des laboratoires HTB, TryHackMe Des...

CVE-2025-32433

CVE-2025-32433 Критическая уязвимость в SSH-сервере Erlang/OTP позволяет выполнить удаленный код без аутентификации RCE. Дефект существует в механизме обработки сообщений протокола SSH, что позволяет злоумышленникам выполнять произвольные команды без необходимости в учетных данных для...

LibSSH-exploit

LibSSH-эксплойт CVE-2018-10933 Уязвимые ssh-серверы - libssh до версии 0.8.4 Отправляет сообщение об авторизации пользователя, что позволяет выполнить удаленный код RCE Использование: ''' Libsshexploit.py '''...

TP-Link-TL-WR820N-CVE-2025-14175

🔐 CVE-2025-14175 Поддержка слабых алгоритмов в SSH-сервере – TP-Link TL-WR820N Обзор Этот репозиторий документирует уязвимость безопасности, обнаруженную в реализации SSH-сервера маршрутизатора TP-Link TL-WR820N v2.80. Уязвимость позволяла использовать слабые криптографические алгоритмы , что мог...

CVE-2024-39930-PoC

CVE-2024-39930-PoC Эксплоит-код для CVE-2024-39930 gogs ssh сервера RCE...

EUVD-2026-89205

russh: negotiating a MAC-requiring block cipher CTR/CBC with mac=none causes a slice-index-out-of-range panic...

CLEANSTART-2026-OV85414 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

Security vulnerability affects the containerd package. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded...

CVE-2024-45337

Эксплойт Proof of Concept для CVE-2024-45337 Этот репозиторий содержит эксплойт Proof of Concept для CVE-2024-45337. Его можно использовать для обёртки ssh при взаимодействии с SSH-сервером, реализованным с помощью golang.org/x/crypto = v0.30.0, при небезопасном кэшировании разрешений в обратном...

CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1787063936)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1787063936 advisory. - libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1786960012)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786960012 advisory. - SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a...

CLEANSTART-2026-OJ26404 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the loki package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

CLEANSTART-2026-BI76349 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate

Security vulnerability affects the loki package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...

CLEANSTART-2026-CG56781 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

Security vulnerability affects the loki package. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded...

EUVD-2026-86157

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124497 advisory. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component including Streaming Telemetry with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security...

USN-8799-1 libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2026-58050 It was discovered that libssh2 did not properly...