authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

CVE-2018-11235

CVE-2018-11235 Getting started To build the Docker containers, use: make docker The following make commands must be run in parallel on different terminals from your machine To start the attacker server container, use: make runserver to start the victim container, use: make runclient The container...

fortipwn

fortipwn Forti CVE-2022-40684 enumeration script built in Rust. Uploads an SSH public key into authorizedkeys, allowing an attacker to SSH into a server running FortiOS as admin. Usage $ ./fortipwn Build $ git clone https://github.com/Grapphy/fortipwn/ $ cd fortipwn $ cargo build --release $ cd...

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: ansible.posix authorizedkey local privilege escalation Local privilege escalation in the ansible.posix.authorizedkey Ansible module via symlink-following chown and symlink-following file creation on a user's /.ssh directory and authorizedkeys file. This is a writeup of a...

CVE-2026-123962

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...

DEBIAN-CVE-2026-123962

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...

CVE-2026-123962

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...

EUVD-2026-118380

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...

CVE-2026-123962

In FreedomBox versions prior to 26.15 , unprivileged user accounts can perform unauthorized read and write operations on files they lack permissions for. The root cause is a symlink vulnerability (CWE-61) where a user can set the authorized_keys file as a symbolic link. No specific exploit code o...

CVE-2026-123962

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...

UBUNTU-CVE-2026-110928

authorizedkeys restrict does not apply to tunnel forwarding...

CVE-2026-110928

authorizedkeys restrict does not apply to tunnel forwarding...

ROS-20261026-73-0004

The vulnerability of the authorizedkeys function in the OpenSSH cryptographic security tool is related to the improper implementation of stream control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Astra Linux – vulnerability in openssh

OpenSSH versions prior to 10.3 mishandle the authorizedkeys principals option in unusual scenarios involving a principals list alongside a Certificate Authority that utilizes certain comma characters...

Astra Linux – Vulnerability in rsync

A vulnerability was discovered in rsync prior to version 3.2.5. This vulnerability allows malicious remote servers to write arbitrary files into the directories of connecting peers. The server determines which files/directories are sent to the client. However, the rsync client lacks sufficient...

Astra Linux – vulnerability in python-pip

The pip package prior to version 19.2 for Python allows directory traversal when a URL is provided in an install command, as a Content-Disposition header can contain ../ in the filename—as demonstrated by the overwrite of the /root/.ssh/authorizedkeys file. This behavior occurs in downloadhttpurl...

SUSE CVE-2026-106586

In sshd in OpenSSH before 10.6, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283...

CVE-2026-106586

In sshd in OpenSSH before 10.6, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283...

UBUNTU-CVE-2026-106586

In sshd in OpenSSH before 10.6, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283...

AZL-106688 CVE-2026-106586 affecting package openssh 9.8p1-11

In sshd in OpenSSH before 10.6, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283...