SSHintel

SSHintel — 軽量SSHハニーポット SSHintel は、PythonとParamikoを使用して構築された軽量SSHハニーポットです。偽のLinuxシェルをシミュレートして、不正アクセスの試みを記録し、認証情報を取得し、管理された環境で攻撃者の行動を分析します。 🔧 機能 IP、ユーザー名、パスワードを含むSSHログイン試行を記録 シミュレートされた Linuxシェル（偽のインメモリ環境）を提供...

cve-2016-20012

CVE-2016-20012 SSH 사용자 이름 열거 스크립트 이 Python 스크립트는 잘못된 비밀번호로 연결을 시도하여 SSH 서버에서 유효한 사용자 이름을 열거하려고 시도합니다. 각 사용자 이름에 대한 응답 시간을 측정하여 서버 동작을 기반으로 가능한 유효한 계정을 식별합니다. 목차 개요 작동 방식 요구 사항 설정 및 사용법 면책 조항 개요 이 스크립트는 paramiko 라이브러리를 활용하여 SSH 사용자 이름 열거를 수행합니다. 제공된 단어 목록의 사용자 이름과 잘못된 비밀번호를 사용하여 SSH 서버에 연결을 시도합니다....

EulerOS 2.0 SP15 : python-paramiko (EulerOS-SA-2026-3792)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

EulerOS 2.0 SP15 : python-paramiko (EulerOS-SA-2026-3817)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

CLSA-2026-1789543032 TuxCare security update for paramiko (2 CVEs)

TuxCare rebuilt paramiko to address 2 CVEs. Fixed in 2.12.0.post1+tuxcare...

Astra Linux – Vulnerabilities in paramiko, libssh, libssh2, erlang, openssh

The SSH transport protocol, with certain OpenSSH extensions, found in OpenSSH versions prior to 9.6 and other products, allows remote attackers to bypass integrity checks. As a result, some packets may be omitted from the extension negotiation message. Consequently, the client and server may end ...

Astra Linux – Vulnerability in Paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

shodan-CVE-2018-15473

これはShodanによって参照される100のIPアドレスに対してCVE-2018-15473のエクスプロイトをテストする簡単なスクリプトです。テストされるユーザー名はusers.txtに含まれています。 実行する必要があるファイルはmain.pyです。Linuxで動作し、www.shodan.ioから自身のAPIキーを取得する必要があります。 結果は標準出力にのみ表示されます。ips.txtに保存されるIPリストを期待してください。 CVE攻撃はhttps://github.com/Sait-Nuri/CVE-2018-15473からフォークされました。...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a weak cryptographic algorithm vulnerability due to Paramiko

Summary Paramiko is used by IBM Integrated Analytics System as a Python library providing SSH protocol implementation for secure connections. CVE-2026-44405 affects Paramiko through version 4.0.0, where the rsakey.py module allows the use of the SHA-1 algorithm, which is considered...

EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance

Summary The paramiko package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44405 Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE:CWE-327: Use of a Broken...

EulerOS 2.0 SP13 : python-paramiko (EulerOS-SA-2026-3041)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

EulerOS 2.0 SP13 : python-paramiko (EulerOS-SA-2026-2991)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

CLSA-2026-1781571264 TuxCare security update for paramiko (1 CVE)

TuxCare rebuilt paramiko to address 1 CVE. Fixed in 3.0.0.post2+tuxcare...

CLSA-2025-1758154333 TuxCare security update for paramiko (1 CVE)

TuxCare rebuilt paramiko to address 1 CVE. Fixed in 3.0.0.post1+tuxcare...

Security update for python3-dulwich

This update for python3-dulwich fixes the following issue CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for python-dulwich

This update for python-dulwich fixes the following issue CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3408-1 Security update for python-dulwich

This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525...

SUSE SLES15 Security Update : python-paramiko (SUSE-SU-2026:3093-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3093-1 advisory. This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use...