CVE-2019-14287-demo

CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...

CVE-2021-3156

CVE-2021-3156 In this document we include all the knowledge necessary in order to understand the code in this repository and why it works. All the explaination is based on the report created by QUALYS. There more forms of exploitation are explained. Requirements The vulnerable versions of sudo ar...

Oracle Linux 8 : openssh (ELSA-2026-88211)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88211 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsin...

openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw

A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP SSH File Transfer Protocol connections, potentially leading ...

openssh security update

9.9p1-13.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...

Oracle Linux 9 : openssh (ELSA-2026-85958)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85958 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276221 - CVE-2026-59997: Fix internal-sftp server argument parsin...

openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw

A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP SSH File Transfer Protocol connections, potentially leading ...

openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw

A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP SSH File Transfer Protocol connections, potentially leading ...

Oracle Linux 10 : openssh (ELSA-2026-85847)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85847 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsi...

openssh security update

9.9p1-29.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37824421 9.9p1-29 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276232 - CVE-2026-60000: Fix DoS via...

CentOS 9 : openssh-9.9p1-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-16.el9 build changelog. - Document caveat regarding GSSAPIStrictAcceptorCheck CVE-2026-59998 - Fix internal-sftp server argument parsing limit CVE-2026-59997 - Fi...

Stack-Based Buffer Overflow in Setuid Diagnostic Utility via Argument Parsing

: A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

Exploit for Path Traversal in Jenkins

\ CVE-2024-23897 — Jenkins CLI Arbitrary File Read Lab \ 1...

CLSA-2026-1789745757 Fix CVE(s): CVE-2026-70456

SECURITY UPDATE: Out-of-bounds NULL write in daemon argument parsing - debian/patches/CVE-2026-70456.patch: grow argv to reserve the trailing NULL slot before readargs stores it in io.c - CVE-2026-70456...

CVE-2026-54577

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted localargv and localargc values but passed the original argument entry to auditpackage. When an operator or automation used an option such as -r before a package name, stale optind...

CVE-2026-54577

mport , the MidnightBSD Package Manager, contained a bug in its audit command prior to version 2.7.8. The function in mport/mport.c computed option-adjusted local arguments but passed the original argument entry to audit_package(). When an operator or automation used an option such as -r before a...

EUVD-2026-82320

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted localargv and localargc values but passed the original argument entry to auditpackage. When an operator or automation used an option such as -r before a package name, stale optind...

PT-2026-95002

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The audit command in mport/mport.c incorrectly handles argument parsing. It computes option-adjusted local argv and local argc values but passes the original argument entry to the audit package functio...

CLSA-2026-1789569581 Fix CVE(s): CVE-2026-70456

SECURITY UPDATE: Out-of-bounds heap write in daemon argument parsing - debian/patches/CVE-2026-70456.patch: grow argv to argc + 1 entries in readargs io.c before storing the trailing NULL, so a post-dot daemon request whose glob expansion lands argc exactly on maxargs no longer writes one pointer...

CVE-2026-84256

A flaw was found in OpenVPN on Windows. An argument parsing issue allows remote authenticated users to execute arbitrary commands by providing a specially crafted certificate subject. This vulnerability could lead to a complete compromise of the affected system...