CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675

Versions of FFmpeg through 9.0.2 are vulnerable to a missing SSH host key verification issue within the libssh-based sftp protocol handler . This flaw allows network attackers to perform man-in-the-middle , DNS, or ARP spoofing to impersonate SFTP servers. Consequences include the ability to capt...

CVE-2026-107675

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

camel-pqc-tls

Post-Quanten-TLS mit Apache Camel Dieses Repository enthält drei Beispiele, die Post-Quanten-Kryptografie PQC TLS 1.3-Handshakes mit Apache Camel unter Verwendung des X25519MLKEM768 -Hybridschlüsselaustauschs demonstrieren. X25519MLKEM768 kombiniert klassisches X25519...

CVE-2026-14507

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2020-11651

CVE-2020-11651 PoC für CVE-2020-11651 Erfordert Python3, getestet auf 3.8 python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Ziel-Server-IP oder Host...

dotclaude-security

dotclaude-security Scansiona la configurazione locale di .claude/ di un repository — settings.json hooks, definizioni del server MCP, blocchi env, permissions.allow — per i pericoli di RCE e esfiltrazione di chiavi API che scattano nel momento in cui fai git clone e apri un repository non fidato ...

cve-2022-30190

cve-2022-30190 Behebung von CVE-2022-30190 durch Entfernen von ms-msdt aus der Windows-Registrierung Ressourcen Microsoft-Leitfaden und Problemumgehung Palo-Alto-Bewertung...

CVE_2021_27850_POC

Befehlsverwendung git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command 假设 hmac key为 change this immediate...

VULNERABLE-CVE-2024-45337

VULNERABLE-CVE-2024-45337 Ein Beispielprojekt, das Golang-Code zeigt, der für CVE-2024-45337 anfällig ist. Dies ist ein Begleitprojekt zu: https://github.com/NHAS/CVE-2024-45337-POC Damit du etwas zum Ausnutzen hast. Verwendung go run solver.go -authorised-pubkey ided25519.pub -allowed...

CVE-2025-10576

CVE-2025-10576 HP Sound Research SECOMNService Escalation dei Privilegi. Permessi deboli del registro consentono a qualsiasi utente di creare un symlink del registro e forzare il servizio SECOMNService a creare una chiave di registro arbitraria. Procedura: 1. soundresearchpoc.exe prepare 2. Resta...

CVE-2024-31497-POC

CVE-2024-31497 POC Diese Sicherheitslücke nutzt die voreingenommene Erzeugung der ECDSA-Nonce in der Datei ecc-ssh.c aus. Die Nonce wird mit $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ erzeugt, wobei die oberen 9 Bits auf Null gesetzt werden. Um den privaten Schlüssel wiederherzustellen,...

cve-2023-31355-poc

SEV-Firmware-Schwachstelle Dieses Repository enthält einen Exploit für eine Schwachstelle in der SEV-Firmware. Der Exploit ermöglicht es, beliebigen Speicher eines SEV-SNP-Gasts zu entschlüsseln, nachdem dieser dekommissioniert wurde. Getestet mit Version 1.55.16 zum Zeitpunkt des Schreibens die...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 Dieses Repository enthält die Abschlussarbeit, die ich im Rahmen meines Bachelorstudiums in Mathematischer Ingenieurwissenschaft am Polytechnikum Turin entwickelt habe. Es handelt sich um ein Skript, das auf Python und Sage basiert. Das Ziel des Skripts...

ssh-hardening

Rafforzamento SSH Blocca SSH su Debian/Ubuntu in un unico comando: nuova porta, nessun login root, autenticazione tramite chiave, UFW e Fail2Ban opzionali. Cosa vedrai Quando esegui lo script, rileva il tuo sistema operativo e mostra le impostazioni prima di chiedere di continuare: Avvio rapido...

CVE-2026-14507

IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 are vulnerable to an out-of-bounds write (CWE-787) caused by improper memory allocation during key derivation. A remote authenticated attacker can exploit this flaw to cause a denial of service (DoS). IBM addresses this vulnerability in ver...

EUVD-2026-94995

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2026-14507 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...