Lucene search
+L

13 matches found

Kitploit
Kitploit
added 2026/09/20 2:08 a.m.8 views

CVE-2018-10933_ssh

CVE-2018-10933 测试此代码: 从主页获取易受攻击的 libssh 版本:https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz 解压并构建,然后进入 example 目录,那里有一个使用 libssh 的简单 sshd 服务器,名称:samplesshd-cb 通过以下命令运行这个简单的 sshd: $ samplesshd-cb 127.0.0.1 -p 2222 运行我的代码,输出将是: Allocated session channel Allocated shell...

9.1CVSS7.8AI score0.91789EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/19 9:24 p.m.13 views

CVE-2018-10933

CVE-2018-10933 要测试此代码: 在主页获取存在漏洞的 libssh 版本:https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz 解压并构建,然后进入 example 目录,有一个使用 libssh 的简单 sshd 服务器,名为:samplesshd-cb 通过以下命令运行这个简单的 sshd: $ samplesshd-cb 127.0.0.1 -p 2222 运行我的代码,输出将为: Allocated session channel Allocated shell 这意味着我可以绕过身份验证,无需任何凭据即可生成一个...

9.1CVSS7.8AI score0.91789EPSS
SaveExploits13
NVD
NVD
added 2026/09/05 8:17 p.m.16 views

CVE-2026-67279

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

6.9CVSS0.00446EPSS
SaveExploits0References7
OSV
OSV
added 2025/12/30 1:16 p.m.22 views

UBUNTU-CVE-2022-50856

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...

5.7AI score0.00195EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.7 views

CVE-2022-50856

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...

5.7AI score0.00195EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/30 1:16 p.m.8 views

CVE-2022-50856

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...

0.00195EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/30 12:15 p.m.36 views

CVE-2022-50856

The CVE-2022-50856 entry applies to the Linux kernel, specifically the CIFS subsystem. The vulnerability was caused by an xid leak in cifs_ses_add_channel() where the xid was not freed before returning. A fix was applied to ensure the xid is freed, mitigating the leak. Affected versions/contexts ...

6.2AI score0.00195EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/30 12:15 p.m.30 views

CVE-2022-50856 cifs: Fix xid leak in cifs_ses_add_channel()

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...

0.00195EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/12/30 12:15 p.m.11 views

CVE-2022-50856

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...

5.3AI score0.00195EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/30 12:00 a.m.25 views

PT-2025-53974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CIFS implementation within the cifs ses add channel function. Specifically, the function fails to free a transaction ID xid before returning, leading ...

7.8CVSS7AI score0.00954EPSS
SaveExploits2References894
OSV
OSV
added 2024/05/20 10:15 a.m.5 views

DEBIAN-CVE-2024-35999

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 "Data race condition MISSINGLOCK"...

7.5CVSS5.4AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
added 2011/10/21 10:55 a.m.7 views

DEBIAN-CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

6.8CVSS6.6AI score0.0238EPSS
SaveExploits0References1
OSV
OSV
added 2008/03/20 12:44 a.m.9 views

DEBIAN-CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

8.8CVSS6.4AI score0.02327EPSS
SaveExploits1References1
Rows per page
Query Builder