CVE-2023-48795

🛡️ Terrapin Vulnerability Scanner CVE-2023-48795 A Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 Terrapin by extracting OpenSSH version banners over port 22 using netcat. 📌 Description This scanner checks if a target SSH server is running a vulnerable version of...

Malicious code in app-sim-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8470a75b327a72623ec4379302a2fc6ecdbaa302acf4fa1e39f1c688103562be package.json declares a postinstall hook that runs node test.js on npm install; test.js invokes fromstr2 and fromstr1 in index.js. fromstr2 fetches...

EUVD-2025-201181

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with netwo...

EUVD-2017-9024

Malware in sbrugna...

EUVD-2018-17845

Malware in sbrugna...

EUVD-2024-32832

Malicious code in bioql PyPI...

EUVD-2025-12172

Malicious code in bioql PyPI...

EUVD-2023-12870

Malicious code in bioql PyPI...

CVE-2025-48416

An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be...

CVE-2025-48416

An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be...

PT-2025-22345

Name of the Vulnerable Software and Affected Versions OpenSSH affected versions not specified Description The issue concerns an OpenSSH daemon listening on TCP port 22, with a hard-coded entry in the "/etc/shadow" file for the "root" user. Although the default SSH configuration has...

Configure Proper Policies for INPUT of nftables

The INPUT chain is used to filter packets received from external systems. For any service provided for external systems, configure the corresponding INPUT policy and enable the related port so that external clients can access the service through the port. If the policy is not set, all packets tha...

CVE-2025-2773

BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability,...

CVE-2025-2773

BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability,...

CVE-2025-2773: Improper Neutralization of Special Elements used in an OS Command

BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability,...

CVE-2023-0881

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nftlookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package...

CVE-2023-0881 DDoS in Ubuntu package linux-bluefield

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nftlookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package...

CVE-2023-0881 DDoS in Ubuntu package linux-bluefield

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nftlookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package...

CVE-2023-0881

CVE-2023-0881 : Concrete details show a kernel crash triggered by running DDoS against TCP port 22, due to a backport of a commit related to nft_lookup without subsequent fixes. The issue is addressed by applying the fixes/commits to the linux-bluefield package (Ubuntu) as part of the resolution....

PT-2025-13771

Name of the Vulnerable Software and Affected Versions linux-bluefield affected versions not specified Description The issue is triggered by a DDoS attack on tcp port 22, causing a kernel crash. This problem arises from the backport of a commit related to nft lookup without including subsequent...