CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - 漏洞利用 | CrushFTP 这是一个针对 CrushFTP 中服务端模板注入 SSTI 与本地文件包含 LFI 漏洞的概念验证。 特性 利用 CrushFTP 服务器中的严重级别漏洞，通过服务端模板注入 SSTI 与身份认证绕过，将此漏洞升级为本地文件包含 LFI！此 PoC 漏洞利用工具旨在自动化检测运行 CrushFTP 的 sFTP 服务器中的漏洞，并实现漏洞利用！ 代码逐步解析： 生成匿名会话令牌 利用这些令牌执行 SSTI，创建我们自己的入口点！ 调用我们的 SSTI...

CVE-2018-7750

CVE-2018-7750 CVE-2018-7750 を利用したRCE（リモートコマンド実行）手法 エクスプロイトタイトル: Paramiko 2.4.1 - Remote Code Execution 日付: 2018-11-06 エクスプロイト作者: jm33-ng ベンダーホームページ: https://www.paramiko.org ソフトウェアリンク: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz バージョン: 1.17.6, 1.18.x 1.18.5, 2.0.x 2.0.8, 2.1.x 2.1.5...

MGASA-2026-0457 Updated erlang package fixes security vulnerabilities

SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...

Updated erlang package fixes security vulnerabilities

SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...

CVE-2026-72903

A flaw was found in Tabby, a terminal emulator. A remote attacker, operating a malicious SFTP server, could exploit a path traversal vulnerability. This occurs when the server returns a specially crafted filename containing backslashes, which are then misinterpreted by Tabby's Windows-native path...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS : libssh2 vulnerabilities (USN-8799-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8799-1 advisory. It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A...

MGASA-2026-0425 Updated libssh packages fix security vulnerabilities

Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...

SUSE SLED15: gvfs / gvfs-backend-afc / gvfs-backend-samba / gvfs-backends / etc (SUSE-SU-2026:4240-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4240-1 advisory. - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when...

SUSE-SU-2026:4200-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

Astra Linux – Vulnerability in sshfs-fuse

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server could return absolute symlink targets or relative targets containing parent-directory components, which SSHFS would pass through FUSE for resolution by the client kernel against the loc...

SUSE CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

CVE-2021-38312

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:25+00:00| seen| https://t.me/hackingAttack/22318 2026-09-02 01:02:59+00:00| seen| https://t.me/hackingAttack/22318 2026-09-07 18:00:05+00:00| seen| https://t.me/hackingAttack/22318 2026-09-08 00:00:37+00:00| seen|...

libssh: libssh: denial of service via oversized SFTP read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

libssh: libssh: denial of service via oversized SFTP read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

K000163156: Multiple libssh vulnerabilties

Security Advisory Description CVE-2026-15370 A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names...

USN-8699-1: libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

USN-8699-1 libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

CVE-2026-77317

SeaweedFS is a distributed storage system for files and blobs. In versions from 3.88 through 4.39, the SFTP server evaluates configured path permissions with a literal string-prefix comparison, so a user scoped to a path is also granted the same access to any sibling path whose name merely begins...

CVE-2026-77317 SeaweedFS: SFTP path ACL literal prefix match permits cross-tenant file read and overwrite

SeaweedFS is a distributed storage system for files and blobs. In versions from 3.88 through 4.39, the SFTP server evaluates configured path permissions with a literal string-prefix comparison, so a user scoped to a path is also granted the same access to any sibling path whose name merely begins...

PT-2026-82324

Name of the Vulnerable Software and Affected Versions SeaweedFS versions 3.88 through 4.39 Description The SFTP server evaluates configured path permissions using a literal string-prefix comparison instead of requiring a path-component boundary. This allows an authenticated low-privilege user...