Lucene search
+L

15 matches found

Kitploit
Kitploit
•added 2026/10/10 2:47 a.m.•18 views

lssh

lssh ls + ssh = lssh lssh è una suite di accesso remoto nativa per il terminale, progettata per flussi di lavoro SSH, inventari cloud e connettori basati su provider. Permette di selezionare host dal file di configurazione OpenSSH, dalla configurazione di lssh o da inventari di provider, e di...

6.1AI score
SaveExploits0References12
OSV
OSV
•added 2026/09/10 6:34 p.m.•50 views

CVE-2026-89049 Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...

8.5CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/09/10 6:34 p.m.•119 views

CVE-2026-89049

AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms is affected by a server-side request forgery (SSRF) flaw in the Session Manager port forwarding to remote hosts functionality. The root cause is improper validation of equivalent address representations , allowing an authent...

9.9CVSS5.9AI score0.00662EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/10 6:34 p.m.•42 views

CVE-2026-89049 Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...

9.9CVSS0.00662EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/10 6:34 p.m.•22 views

CVE-2026-89049 Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...

9.9CVSS5.9AI score0.00662EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•28 views

PT-2026-89562

Name of the Vulnerable Software and Affected Versions Amazon AWS Systems Manager Agent versions prior to 3.3.4851.0 Description A server-side request forgery SSRF issue exists in the port forwarding to remote hosts functionality. The software improperly validates equivalent address representation...

9.9CVSS5.9AI score0.00662EPSS
SaveExploits0References16
attackerkb
attackerkb
•added 2026/08/10 6:21 p.m.•23 views

CVE-2026-68872

The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in o...

5.9AI score0.00596EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/31 5:31 p.m.•20 views

EUVD-2020-0023

Ansible does not collect garbage after playbook run...

5.5CVSS6.1AI score0.00319EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•2 views

PT-2025-45707

A flaw was found in Ansible Base when using the aws ssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality...

5.5CVSS5.7AI score0.00319EPSS
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/11/29 10:09 p.m.•14 views

Malicious code in @terraform-aws-github-runner/aws-ssm-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 923d8c9265a141fb0384c59b41ad9dea10d1d2ee7a4d30165537b10a69d82e40 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-util' @ 1.0.0 npm as malicious. It is considered malicious...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/11/29 6:40 p.m.•26 views

Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2023/06/01 7:50 p.m.•210 views

Command Shell, Bind SSM (via AWS API)

Creates an interactive shell using AWS SSM Module Options msf use payload/generic/shellbindawsssm msf payloadshellbindawsssm show actions ...actions... msf payloadshellbindawsssm set ACTION msf payloadshellbindawsssm show options ...show and set options... msf payloadshellbindawsssm run This modu...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2020/10/05 12:51 p.m.•57 views

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

6.6CVSS6.8AI score0.00309EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/10/05 12:00 a.m.•3 views

PT-2020-16142

Name of the Vulnerable Software and Affected Versions Ansible Base affected versions not specified Description A flaw was found in Ansible Base when using the aws ssm connection plugin. The issue arises because the garbage collector does not run after a playbook run is completed, resulting in fil...

5.5CVSS0.00319EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2020/10/05 12:00 a.m.•4 views

PT-2020-16143

Name of the Vulnerable Software and Affected Versions Ansible Base affected versions not specified Description A flaw was found in Ansible Base when using the aws ssm connection plugin, as there is no namespace separation for file transfers. Files are written directly to the root bucket, making i...

7.1CVSS0.00309EPSS
SaveExploits0References9
Rows per page
Query Builder