CVE-2017-1000117

CVE-2017-1000117 Dieses Modul kann verwendet werden, um zu testen, ob Sie anfällig für CVE-2017-1000117 sind. root@kitploit: git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Ausgabe, wenn Sie anfällig sind: root@kitploit: $ git clone...

CVE-2017-1000117

CVE-2017-1000117 Introduzione al progetto Uno dei temi del progetto del corso di sicurezza informatica Replicazione della vulnerabilità CVE-2017-1000117 PoC+Exp Git + SSH Introduzione alla vulnerabilità: Nome vulnerabilità: Vulnerabilità di iniezione di comandi Git ID CNNVD: CNNVD-201708-670...

cve-2020-5260

cve-2020-5260 Un endpoint PoC HTTP per cve-2020-5260 che può essere distribuito su Heroku INFORMAZIONI SUI CREDITI Felix Wilhelm di Google Project Zero https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 Attiva la vulnerabilità root@kitploit: git clone...

MGASA-2026-0059 Updated openssh packages fix security vulnerabilities

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. CVE-2025-61984...

Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-1441)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1441 advisory. ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The...

Moderate: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security update for openssh

This update for openssh fixes the following issues: CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used bsc1251198 CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used bsc1251199 Patch Instructions: To...

EUVD-2017-4494

Malware in sbrugna...

EUVD-2017-3999

Malware in sbrugna...

The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.

...

RUSTSEC-2024-0335 gix-transport indirect code execution via malicious username

Summary gix-transport does not check the username part of a URL for text that the external ssh program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clone URL is used by an application whose...

SUSE CVE-2017-9800

A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server to attack another...

SUSE CVE-2017-12976

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117...

SUSE CVE-2017-1000117

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim...

Hostname Spoofing

parse-url is vulnerable to hostname spoofing. The vulnerability exists because the parseUrl function of index.js does not properly identify the custom user in ssh url and hostname, allowing an attacker to gain sensitive information by redirecting to the malicious urls...

GHSA-W4XH-W33P-4V29 GitHub Git LFS Arbitrary command execution vulnerability

GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a url = line in a .lfsconfig file within a repository. Specific Go Packages Affected github.com/git-lfs/git-lfs/lfsapi...

GitHub Git LFS Arbitrary command execution vulnerability

GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a url = line in a .lfsconfig file within a repository. Specific Go Packages Affected github.com/git-lfs/git-lfs/lfsapi...

openSUSE: Security Advisory for python-dulwich (openSUSE-SU-2018:2213-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:1489-1 Security update for bzr

Bzr was updated to fix a security issue: - CVE-2017-14176: Avoid code execution using ssh:// url injection boo1058214...

Git ssh URL Processing Command Execution (CVE-2017-1000117)

A command execution vulnerability exists in the Git client. The vulnerability is due to insufficient validation of ssh:// URLs. Successful exploitation will enable the attacker to execute arbitrary commands on the target system...