1309 matches found
swift-nio-ssh
SwiftNIO SSH このプロジェクトは、SwiftNIO を使用したSSHサポートを含んでいます。 SwiftNIO SSHとは？ SwiftNIO SSHは、SSHのプログラムによる実装です。つまり、プログラマがSSHを話すエンドポイントを実装できるようにするAPIのコレクションです。重要なのは、これはopensshというよりlibssh2に近いということです。SwiftNIO SSHは本番環境ですぐ使えるSSHクライアントやサーバを提供するのではなく、そのようなクライアントとサーバを構築するための構成要素を提供します。...
libssh2-Exploit
libssh2-취약점 libssh2 취약점CVE-2019-13115에 대한 익스플로잇 생성 목표 1. OpenSSH 서버 구축. // 10월 20일까지 완료 2. libssh2 C++ 클라이언트 생성 및 서버 연결 설정. // 10월 20일까지 완료 3. 서버를 수정하여 클라이언트 충돌 유발. // 10월 31일까지 완료 4. 서버를 수정하여 클라이언트에서 민감한 데이터 탈취. // 10월 31일까지 완료 5. libssh2를 사용하는 실제 애플리케이션 탐색 및 악성 서버가 이를 악용할 수 있는지 확인. // 10월 31일까지...
Libssh2-Exploit
Libssh2-Exploit 目標 このプロジェクトでは、CVE-2019-13115 で説明されている libssh2 の領域外読み取り out-of-bounds read の脆弱性を利用するエクスプロイトを作成することを目的としています。悪意のある SSH サーバーを作成して、接続してくるクライアントをクラッシュさせ、さらにこれを悪用してクライアントからデータを盗み取れるかどうかを確認します。 OpenSSH サーバーの起動 openssh-8.1p1.tar.gz 編集前の OpenSSH サーバー用 または openssh-malicious.zip 悪意のあるサーバー用...
Exploitarium-Detections
Exploitarium KQL 탐지 범위 Microsoft Sentinel 및 Defender XDR용 KQL 탐지 규칙으로, bikini/exploitarium 익명 공개 내용을 다룹니다 — 2026년 6월 23일에 공급업체 통보 없이 공개된 15개 이상의 개별 취약점 대상과 109개 이상의 추적 파일에 걸친 개인 연구 아카이브입니다. 54개 규칙 | 23개 제품 폴더 | KQL | 저자: Ethan Andrews @eandrews 최종 업데이트: 2026년 7월 1일 인텔 보고서:...
CVE-2026-55200
セキュリティレポート：CVE-2026-55200 📝 概要説明 CVE-2026-55200 は、libssh2 ライブラリのバージョン1.11.1までに影響する、 ヒープ ベースのメモリオーバーフロー（動的メモリ破損）の重大な脆弱性です。 悪意のあるSSHサーバーが、それに接続する脆弱なクライアントを侵害することを可能にします。 ⚡ 技術的詳細 脆弱性の種類: メモリオーバーフロー（ ヒープベースのバッファオーバーフロー ）。 主な影響: リモートコード実行（RCE）およびサービス拒否（DoS）。 攻撃フェーズ: 暗号化認証前 に発生します。 攻撃ベクトル:...
CVE-2026-55200
🚨 CVE-2026-55200 - 치명적인 libssh2 버퍼 초과 쓰기 취약점 📌 개요 CVE-2026-55200 는 널리 배포된 libssh2 라이브러리에 영향을 미치는 치명적인 메모리 손상 취약점 입니다. 이 결함은 SSH 패킷 처리 중 패킷 길이 필드의 부적절한 검증으로 인해 발생하며, 원격 공격자가 힙 손상을 일으키고 특정 상황에서 원격 코드 실행RCE을 달성할 수 있습니다. 🔥 심각도 지표| 값 ---|--- CVE ID| CVE-2026-55200 심각도| 치명적 CVSS 점수| 9.2 공격 벡터| 네트워크 필요...
Astra Linux – Vulnerability in libgit2
libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Previous versions of libgit2 required the caller to set the certificatecheck field of the libgit2’s...
CVE-2026-55200
CVE-2026-55200 - 치명적인 libssh2 원격 코드 실행 취약점 libssh2의 인증 전 치명적인 메모리 손상 취약점 개요 필드| 세부 정보 ---|--- CVE| CVE-2026-55200 CVSS| 9.2 치명적 유형| 경계를 벗어난 쓰기 구성 요소| libssh2 영향받는 버전| = 1.11.1 공격 벡터| 네트워크 필요한 권한| 없음 사용자 상호 작용| 없음 영향| 원격 코드 실행RCE, 서비스 거부DoS 수정 버전| 커밋 97acf3dfda80c91c3a8c9f2372546301d4a1a7a8 공개 날짜|...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777036898)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777036898 advisory. - An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A...
CentOS Linux 7.9 [CIQ] Security Update: libssh2 / libssh2-debuginfo / libssh2-devel / libssh2-docs (ciqsa-2026_1438)
The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261438 advisory. This advisory aggregates security fixes for the libssh2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-15661. Tenable has extracted the preceding...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1784282780)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1784282780 advisory. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
CentOS Linux 7 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS7:CLSA-2026:1787064509)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1787064509 advisory. - libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...
CentOS Linux 7 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS7:CLSA-2026:1783634800)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783634800 advisory. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1778745959)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778745959 advisory. - A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs Multiple Vulnerabilities (CENTOS6:CLSA-2026:1778788223)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1778788223 advisory. - An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote...
CentOS Linux 7 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS7:CLSA-2026:1778247114)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778247114 advisory. - A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1787063936)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1787063936 advisory. - libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs Multiple Vulnerabilities (CENTOS6:CLSA-2026:1778159627)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1778159627 advisory. - In libssh2 before 1.9.0, kexmethoddiffiehellmangroupexchangesha256keyexchange in kex.c has an integer overflow that could lead to an...
