23 matches found
ssh-chatter
SSH-Chatter: نظام لوحة إعلانات نصي TUI بلغة C ssh [email protected] برنامج BBS عام بدأ SSH-Chatter كإعادة تنفيذ بلغة C لخادم ssh-chat المكتوب بـ Go. إنه يعكس/يوسع السلوك الأصلي مع استخدام أنماط C الحديثة ونواة صغيرة قابلة للاختبار. يستمع الخادم إلى اتصالات SSH/TELNET ويضع كل مستخدم مصادق علي...
psc
PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...
Cowrie and Grafana Honeypot using Terraform on DigitalOcean
Cowrie & Grafana Honeypot باستخدام Terraform على DigitalOcean فيديو توضيحي جدول المحتويات جدول المحتويات نظرة عامة على النظام التقنيات هيكل دليل المشروع متطلبات الأجهزة التثبيت والإعداد إدارة حالة Terraform أنبوب CI/CD هندسة النظام الملاحظات الاستخدام توثيق المشروع تصميم الهندسة والمقايضات شرح...
CVE-2025-49599
Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...
CVE-2025-49599
Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...
CVE-2022-4390
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...
CVE-2019-9228
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The 1 management SSH and 2 management TELNET features allow remote attackers to cause a denial of service connection slot exhaustion via 5...
D-Link Routers Incorrect Use Of Privileged APIs (CVE-2024-11068)
The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any userâs password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that userâs account. Note that Nessus has not tested f...
CVE-2024-5651
A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...
CVE-2024-5651 Fence-agents-remediation: fence agent command line options leads to remote code execution
A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...
CVE-2024-5651
CVE-2024-5651 affects the Fence Agents Remediation Operator. A flaw in handling --ssh-path/--telnet-path arguments enables Remote Code Execution, allowing a low-privilege user to craft a FenceAgentsRemediation that executes arbitrary commands on the operator pod, escalating from the operator’s se...
CVE-2024-5651
A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...
BMC Network Automation 8.7.00.000 Session Hijacking
Intro: The BMC Network Automation allows authenticated users to hijack established remote sessions of other users, version v8.7.00.000 b383 u038 was confirmed to be vulnerable. Details: Authenticated users of the BMC Network Automation web application with assigned aviewera role are able to hijac...
Cowrie - SSH/Telnet Honeypot
Cowrie is a medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. Cowrie is developed by Michel Oosterhof. Features Some interesting features: Fake filesystem with the ability to add/remove files. A full fake filesystem...
[SECURITY] Fedora 21 Update: putty-0.64-1.fc21
Putty is a SSH, Telnet & Rlogin client - this time for Linux...
Pandora Fms 5.0RC1 - Remote Command Injection
----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Pandora FMS 5.0RC1 and below ------------------------- Affected vendors: ------------------------- Pandora FMS http://pandorafms.com/ ------------------------- Product description:...
[Patator v0.5] Multi-purpose brute-forcer, with a modular design and a flexible usage
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Currently it supports the following modules: ftplogin : Brute-force FTP sshlogin : Brute-force SSH telnetlogin : Brute-force Telnet smtplogin : Brute-force SMTP smtpvrfy : Enumerate valid users using the SMTP VRF...
Proof of Concept : PuttyHijack – Hijack SSH/PuTTY Sessions
Proof of Concept : PuttyHijack - Hijack SSH/PuTTY Sessions PuttyHijack is a POC tool that injects a dll into the Putty process to hijack an existing, or soon to be created, connection. This can be useful during penetration tests when a windows box that has been compromised is used to SSH/Telnet...
Foxit WAC Server <= 2.1.0.910 crash
Luigi Auriemma Application: Foxit Remote Access Server WAC Server http://www.foxitsoft.com/wac/serverintro.php Versions: = 2.1.0.910 Platforms: Windows Bug: crash Exploitation: remote Date: 04 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...
SecureCRT SSH1 protocol version string overflow
The remote host is using a vulnerable version of SecureCRT, a SSH/Telnet client built for Microsoft Windows operation systems. It has been reported that SecureCRT contain a remote buffer overflow allowing an SSH server to execute arbitrary command via a specially long SSH1 protocol version string...