16134 matches found
How to Collect Logs from Veeam Appliance Installer
Purpose This article documents how to collect logs from the installer for the Software Appliances included with Veeam Backup & Replication 13 Veeam Software Appliance, Veeam Infrastructure Appliance, and Veeam Hardened Repository Appliance. This procedure may be required if an installation-relate...
CVE-2025-58778
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
CVE-2025-58778
CVE-2025-58778 concerns Ruijie Networks RG-EST300 devices, where an undocumented SSH server feature is enabled by default in the initial configuration. The vulnerability allows anyone with the relevant credentials to log in, potentially leading to information disclosure, unauthorized changes to s...
CVE-2025-53868 BIG-IP SCP and SFTP vulnerability
When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Security update for libssh
This update for libssh fixes the following issues: CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375 Patch Instructions: To install this SUSE upda...
Dell Enterprise SONiC OS < 4.5.0a RCE (DSA-2025-275)
The version of Dell Enterprise SONiC OS running on the remote host is prior to 4.5.0a. It is, therefore, affected by a remote code execution vulnerability as detailed in the DSA-2025-275 advisory: - Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An...
OPENVAS SCAN / Greenbone Enterprise Appliance (GEA) / Greenbone Security Manager (GSM) / Greenbone OS (GOS) (SSH Banner)
SSH banner-based detection of OPENVAS SCAN / Greenbone Enterprise Appliance GEA / Greenbone Security Manager GSM / Greenbone OS GOS. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
OESA-2025-2370 erlang security update
Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Allocation of Resources Without Limits or Throttling...
curl: Missing enforcement of SFTP quote syntax can lead to operation on wrong object
Summary: curl supports -Q or --quote and libcurl CURLOPTQUOTE to specify "commands" to execute for ftp and SFTP connections. The SFTP supports commands that perform operations on filesystem objects. When the object path has a filename, the caller is supposed to quote the parameter example: -Q...
JLSEC-2025-7 ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
PT-2025-41409
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 22.2R1 Patch V3 Juniper Networks Junos Space versions 23.1 before 23.1R1 Patch V3 Description An Uncontrolled Resource Consumption issue exists in the HTTP daemon httpd of Juniper Networks Junos...
PT-2025-41791
Уязвимость микропрограммного обеспечения медиаконвертеров TRC-2190 Series связана с использованием жестко закодированного криптографического ключа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить атаку типа «человек посередине» путем использования общедоступно...
CLSA-2025-1759951300 libssh: Fix of CVE-2025-5372
CVE-2025-5372: uninitialized key buffers caused by inconsistent sshkdf return value...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.41 bug fix and security update
Red Hat OpenShift Container Platform release 4.17.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...
Linux Distros Unpatched Vulnerability : CVE-2025-61984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution...
SUSE CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
EUVD-2021-27003
Malware in sbrugna...
EUVD-2019-9350
Malware in sbrugna...