openssh security update

8.7p1-34.3 - Fix Terrapin attack CVE-2023-48795 Resolves: RHEL-19764 - Forbid shell metasymbols in username/hostname CVE-2023-51385 Resolves: RHEL-19822...

openssh security update

8.0p1-19.0.1.2 - Update patches for CVE-2023-51385, CVE-2023-48795 Orabug: 36256632 8.0p1-19.2 - Forbid shell metasymbols in username/hostname Resolves: CVE-2023-51385 - Fix Terrapin attack Resolves: CVE-2023-48795...

Fedora 38 : openssh (2024-37627e432e)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-37627e432e advisory. Forbid shell metasymbols in username/hostname Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

The vulnerability of the GoAhead microprogramming software component of D-Link DIR-823G routers allows a hacker to execute arbitrary commands.

The vulnerability of the GoAhead microprogramming software for D-Link DIR-823G routers exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through...

The vulnerability in cgi_test.cgi of the built-in microprogramming software for IP cameras from AirLive – models BU-3026, BU-2015, and MD-3025 – allows a intruder to execute arbitrary commands on the operating system.

The vulnerability in cgitest.cgi of the built-in microprogramming software for AirLive BU-3026, AirLive BU-2015, and AirLive MD-3025 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious...

The vulnerability in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin allows a malicious user to execute arbitrary commands on the operating system.

The vulnerability in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin exists due to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating...