Libssh2-Exploit

Libssh2-Exploit Objectifs Dans ce projet, nous visons à créer un exploit pour une vulnérabilité de lecture hors limites dans libssh2 décrite dans CVE-2019-13115. Créez un serveur ssh malveillant pour faire planter un client qui s'y connecte et voyez si cela peut être exploité davantage pour voler...

CVE-2026-55200

تقرير أمني: CVE-2026-55200 📝 وصف عام CVE-2026-55200 هو ثغرة أمنية خطيرة من نوع تجاوز سعة المخزن المؤقت في الذاكرة الديناميكية تلف الذاكرة الديناميكية تؤثر على مكتبة libssh2 في الإصدارات حتى 1.11.1. تسمح لخادم SSH ضار باختراق العملاء الضعفاء الذين يتصلون به. ⚡ تفاصيل تقنية نوع الثغرة: تجاوز سعة...

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

GHSA-2WXC-X7RJ-HG8F asyncssh has SCP Path Traversal to Arbitrary File Write

| | | |---|---| | Product | asyncssh all versions through 2.23.0 | | Related | CVE-2019-6111 same class in OpenSSH | | Fix | AsyncSSH 2.23.1 | A malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences. The SCP...

OESA-2026-3479 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

AZL-93396 CVE-2026-66032 affecting package libssh2 for versions less than 1.11.1-5

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...

DEBIAN-CVE-2024-52308

The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using gh codespace ssh or gh codespace logs commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running with...