69 matches found
SSH-Private-Key-Looting-Wordlists
利用LFI进行横向移动？获取SSH访问权限？ root@kitploit: ?file=../../../../../../../../home/user/.ssh/idrsa ?file=../../../../../../../../home/user/.ssh/idrsa-cert SSH私钥窃取字典清单 🔒🗝️ 本仓库包含一系列用于协助定位或暴力破解SSH私钥文件名的字典清单。这些字典对于渗透测试人员、安全研究人员以及任何有兴趣评估SSH配置安全性的人士都非常有用。 字典文件 📝 ssh-priv-key-loot-common.txt ：SSH私钥文件的默认和常见命名约定。...
CVE-2026-53456
In Blueprint Studio versions before 2.5.2, the SSH terminal authentication component in custom_components/blueprint_studio/backend/terminal_manager.py wrote SSH private-key material to a file under the Home Assistant configuration directory, applied restrictive permissions afterward, and relied o...
CVE-2026-53456 Blueprint Studio terminal SSH private key written to disk
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in customcomponents/blueprintstudio/backend/terminalmanager.py wrote SSH private-key material to a file under the Home Assistant configuration...
PT-2026-77316
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom components/blueprint studio/backend/terminal manager.py wrote SSH private-key material to a file under the Home Assistant configuration...
Malicious code in supplyhub (npm)
The npm package supplyhub is a credential / SSH-key stealer. Its package.json declares a postinstall lifecycle hook postinstall: node postinstall.js that executes automatically on npm install, before the package is ever imported. postinstall.js uses fs.readFileSync to read the user's SSH private...
CVE-2026-15637
Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to disclose the private key of an SSH key or certificate PAM credential via a direct object reference to the credential identifier...
CVE-2026-15637
Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to disclose the private key of an SSH key or certificate PAM credential via a direct object reference to the credential identifier...
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
An unknown threat actor has been observed using a large language model LLM agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability. "The attacker compromised an...
EUVD-2019-17222
Malware in sbrugna...
EUVD-2012-5502
Malware in sbrugna...
EUVD-2016-2412
Malware in sbrugna...
EUVD-2018-9615
Malware in sbrugna...
EUVD-2020-28101
Malware in sbrugna...
EUVD-2025-23526
Malicious code in bioql PyPI...
EUVD-2025-22715
Malicious code in bioql PyPI...
EUVD-2023-27049
Malicious code in bioql PyPI...
EUVD-2022-5656
Malicious code in bioql PyPI...
CVE-2025-44954
RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account...
