CVE-2026-55797

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port...

CVE-2026-55797 Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port...

CVE-2026-55797

The Argo CD repo-server is vulnerable to command injection (CWE-78) in versions 2.11.0 through 3.3.15 , 3.4.10 , 3.5.4 , and 3.6.0-rc2 . The root cause is the execution of an SSH ProxyCommand containing a proxy host and port through a shell without neutralizing shell metacharacters. An attacker w...

CVE-2017-1000117

CVE-2017-1000117 Comment ça marche ? $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git Comment créer ce dépôt $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $ cat .gitmodules submodule...

CVE-2023-51385_poc-test

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 vulnérabilité d'injection de commande poc Chinois 1.vim /.ssh/config ou modifiez C:/Users/username/.ssh/config sur le système Windows host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone...

cve-2023-51385

CVE-2023-51385 검증 먼저 /.ssh/config에 다음 내용을 추가해야 합니다 host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p .gitmodules 파일 구문에 명령 주입이 존재합니다 url = ssh://echo helloworld cve.txtfoo.example.com/bar 구성이 완료되면 아래 명령을 실행하여 트리거합니다 git clone...

CVE-2023-51385_test

Vérifier CVE-2023-51385 Il faut d'abord ajouter le contenu suivant dans /.ssh/config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Il y a une injection de commande dans l'instruction du fichier .gitmodules url = ssh://echo helloworld cve.txtfoo.example.com/bar Une...

cve-2025-61984-poc

CVE-2025-61984 PoC Это proof of concept, использующий перевод строки для обмана ProxyCommand в OpenSSH 10.1. Полное описание. Как запустить Создайте .ssh/config, содержащий: Host .example.com ProxyCommand some-command %r@%h:%p Команда не важна, главное — чтобы в аргументах был незакавыченный %r...

poc-proxycommand-vulnerable

RCE via /.ssh/config non sécurisé L'utilisation de jetons comme %h, %p dans ProxyCommand est assez populaire pour utiliser des tunnels et du proxy de connexion via SSH. Configuration vulnérable host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note : dans mon évaluatio...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Outil d'exploitation de masse Cockpit Exécution de code à distance non authentifiée via injection d'argument de ligne de commande SSH Versions Cockpit 327 – 359 | CVSS 9.8 Critique | CWE-78 Outil d'exploitation de masse pour CVE-2026-4631 sur le service web Cockpit cockpit-ws, por...

CVE-2023-51385

CVE-2023-51385 OpenSSH ProxyCommand RCE 1. Lorsque votre ProxyCommand est configuré comme suit : Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. Utilisez la commande suivante pour la preuve de concept git clone https://github.com/Le1a/CVE-2023-51385 --recurse-submodules...

CVE-2023-51385-

RCE via insecure /.ssh/config L'utilisation de jetons tels que %h, %p est assez courante pour utiliser des tunnels et du proxy de connexion via SSH.ProxyCommand Configuration vulnérable host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note : lors de mon évaluation...

CVE-2017-1000117

CVE-2017-1000117 Ce module peut être utilisé pour tester si vous êtes vulnérable à CVE-2017-1000117 git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Sortie si vous êtes vulnérable : $ git clone https://github.com/timwr/CVE-2017-1000117.git...

CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC

🔐 CVE-2023-51385 - PoC d'injection ProxyCommand OpenSSH Ce dépôt contient une preuve de concept pour CVE-2023-51385, une vulnérabilité d'injection de commande dans l'option ProxyCommand d'OpenSSH. Un attaquant ayant le contrôle de la configuration SSH ou de chaînes ProxyCommand non fiables peut...

CVE-2023-51385_test

Validation de CVE-2023-51385 Tout d'abord, ajoutez le contenu suivant dans /.ssh/config : host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Il existe une injection de commande dans la déclaration du fichier .gitmodules : url = ssh://echo helloworld...

CVE-2023-51385_test

Validation de CVE-2023-51385 Tout d'abord, ajoutez ce qui suit dans /.ssh/config Host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Il existe une injection de commande dans la déclaration du fichier .gitmodules url = ssh://echo helloworld cve.txtfoo.example.com/bar Une...

Multiple OpenSSH Vulnerabilities (CVE-2026-35386, CVE-2026-35414, CVE-2026-35387, CVE-2026-35388)

Brocade is issuing a security advisory regarding multiple security vulnerabilities discovered in OpenSSH. Vulnerability Details CVE-2026-35386: Remote Code Execution via Shell Metacharacters in Usernames Severity / CVSS v3 Base Score: High / 8.1 Common Weakness Enumeration: CWE-287 Improper...

Rocky Linux 8 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3233)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243233 advisory. libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname CVE-2023-6004 libssh: Missing checks for return values for diges...

CentOS Linux 8 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1767627533)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1767627533 advisory. - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources,...

Rocky Linux 10.1 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_23479)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523479 advisory. openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand CVE-2025-61984 openssh: OpenSSH: Null character in ssh://...