Aker

Aker SSH шлюз Что такое Aker? Aker — это инструмент безопасности, который помогает настроить собственный SSH jump/бастион-хост на Linux. Названный в честь египетского божества, охранявшего границы, Aker действует как контрольная точка, через которую все ваши сисадмины и персонал поддержки получаю...

warpgate

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...

zttp

ZTTP — Proxy Trasparente Zero-Trust Un bastion host SSH self-hosted e rinforzato con gestione delle chiavi basata su Vault, applicazione delle policy RBAC, registrazione completa delle sessioni e una TUI amministrativa interattiva — progettato per team che necessitano di accesso verificabile e...

JumpServer > 3.6.4 - Information Disclosure

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

jumpserver

An open-source PAM platform Bastion Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 What is JumpServer? JumpServer is an open-source Privileged Access Management PAM platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes,...

jumpserver

Eine Open-Source-PAM-Plattform Bastion-Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 Was ist JumpServer? JumpServer ist eine Open-Source-Plattform für privilegierten Zugriff Privileged Access Management, PAM, die DevOps- und IT-Teams über einen Webbrowser...

GHSA-G8WR-R2V2-VQC6 silverstripe/userforms vulnerable to remote code execution via userforms email subject

Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run arbitrary code on the server. Reported by Jack Wallace from Bastion Security...

the-bastion

🔒 The Bastion Panoramica I Bastion sono un cluster di macchine utilizzato come punto di ingresso unico dai team operativi come sysadmin, sviluppatori, amministratori di database, ... per connettersi in modo sicuro a dispositivi server, macchine virtuali, istanze cloud, apparecchiature di rete, .....

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

An unknown threat actor has been observed using a large language model LLM agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability. "The attacker compromised an...

CVE-2026-44347 Warpgate: SSO CSRF -- State Token Not Validated on Return

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, the SSO flow does not validate the state parameter, which makes it possible for an attacker to trick a user into logging into the attacker's account, possibly convincing them to perform sensitive actions on t...

EUVD-2026-29882

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, the SSO flow does not validate the state parameter, which makes it possible for an attacker to trick a user into logging into the attacker's account, possibly convincing them to perform sensitive actions on t...

PT-2026-40469

Name of the Vulnerable Software and Affected Versions Warpgate versions prior to 0.23.3 Description The SSO flow fails to validate the state parameter. This allows an attacker to trick a user into logging into an account controlled by the attacker, which could lead the user to perform sensitive...

CVE-2026-31798

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom SMS API Client. When JumpServer sends MFA/OTP codes via Custom SMS API, an attacker can intercept the request and...

poc_automatisation_wallix

Automatisation WALLIX Bastion PoC d'automatisation pour deplo...

CVE-2023-43660

Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending an SSH key offer without a signature. This allows bypassing authentication under following conditions: 1. The attacker knows the...

CVE-2023-45140

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

CVE-2025-49752

Azure Bastion Elevation of Privilege Vulnerability...

EUVD-2025-198370

Azure Bastion Elevation of Privilege Vulnerability...

CVE-2025-49752

Azure Bastion Elevation of Privilege Vulnerability...

CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability

...