ssh_Enum_vaild

sshEnumvaild 一个Bash脚本，用于利用CVE-2018-15473漏洞枚举有效的SSH用户名。它通过分析身份验证响应来检查OpenSSH服务器上的有效用户名。 功能特性 ✅ 基于OpenSSH响应行为检测有效SSH用户名 ✅ 使用公钥认证绕过技术 ✅ 通过并行处理优化速度 ✅ 自动将有效用户名保存到validusernames.txt ✅ 轻量级，仅需Bash和OpenSSH客户端 1. 仅显示有效用户名（从输出中移除无效用户）。 2. 将有效用户名保存到validusernames.txt。 3. 通过并行执行检查，运行速度更快。 使用方法 chmod +x...

Exploit for CVE-2026-67276

CVE-2026-67276 - MikroTrik SSH Authentication Bypass Exploit...

Multiple cURL vulnerabilities identified in Brocade SANnav CVE-2025-13034, CVE-2025-15079, CVE-2025-15224, CVE-2025-14524, CVE-2025-14819, CVE-2025-14017

Multiple Curl vulnerabilities in Brocade Products. CVE-2025-15079 - libssh global knownhosts override When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were...

CVE-2026-22703

Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...

OESA-2025-2259 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

PT-2025-33677 · Unknown · Meshtastic

Name of the Vulnerable Software and Affected Versions: Meshtastic versions prior to 2.6.3 Description: Meshtastic is a mesh networking solution. An attacker can send NodeInfo with an empty publicKey to bypass size checks, clearing the existing public key. Subsequently, a new key can be sent and...

PT-2023-6511 · Unknown · Soft Serve

Name of the Vulnerable Software and Affected Versions: Soft Serve versions prior to 0.6.2 Description: A security issue in Soft Serve allows an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...