Lucene search
+L

98900 matches found

NVD
NVD
added 2026/07/20 9:16 p.m.11 views

CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS0.00593EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/20 9:16 p.m.10 views

UBUNTU-CVE-2026-58624

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

5.4CVSS6AI score0.00424EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/07/20 9:16 p.m.14 views

CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.5AI score0.00593EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/07/20 9:16 p.m.17 views

CVE-2026-58624

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

5.4CVSS5.7AI score0.00424EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 9:16 p.m.10 views

UBUNTU-CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.9AI score0.00593EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/20 9:03 p.m.7 views

CVE-2026-44510

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver-side out-of-bounds array read in rsync's recvfiles lets a malicious rsync server or any peer acting in the sender role deterministically crash any rsyn...

6.5CVSS5.4AI score0.00199EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/20 9:03 p.m.13 views

EUVD-2026-46111

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver-side out-of-bounds array read in rsync's recvfiles lets a malicious rsync server or any peer acting in the sender role deterministically crash any rsyn...

6.5CVSS5.5AI score0.00199EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/07/20 8:51 p.m.31 views

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Summary brace-expansion's expand exhibits exponential-time - O2ⁿ - behavior in the number of consecutive non-expanding groups. A short, all-ASCII input 90 bytes/30 groups blocks the calling thread for minutes; a slightly longer input hangs it effectively indefinitely. Because the dominant consume...

8.7CVSS5.7AI score0.00348EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2026/07/20 8:51 p.m.16 views

GHSA-3JXR-9VMJ-R5CP brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Summary brace-expansion's expand exhibits exponential-time - O2ⁿ - behavior in the number of consecutive non-expanding groups. A short, all-ASCII input 90 bytes/30 groups blocks the calling thread for minutes; a slightly longer input hangs it effectively indefinitely. Because the dominant consume...

8.7CVSS5.7AI score0.00348EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/20 8:44 p.m.26 views

Malicious code in trongridmy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17d343778bc5b25dea876fcf592e8e0267c3ec189ea931a6c73ab536894aabee Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

5.3AI score
SaveExploits0References2
OSV
OSV
added 2026/07/20 8:44 p.m.14 views

MAL-2026-10930 Malicious code in trongridmy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17d343778bc5b25dea876fcf592e8e0267c3ec189ea931a6c73ab536894aabee Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

5.3AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/20 8:29 p.m.37 views

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS0.00593EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/20 8:29 p.m.10 views

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.5AI score0.00593EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/20 8:29 p.m.7 views

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.9AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/20 8:29 p.m.9 views

CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.5AI score0.00593EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/20 8:29 p.m.26 views

CVE-2026-56623

The CVE-2026-56623 issue affects deployments using Apache MINA SSHD’s sshd-git to implement a git server on Windows. The vulnerability arises from Windows-specific path validation that is partly ineffective, potentially allowing an authenticated remote user to access git repositories outside the ...

7.1CVSS5.5AI score0.00593EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/20 8:29 p.m.15 views

EUVD-2026-46104

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.5AI score0.00593EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/20 8:29 p.m.27 views

CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

7.1CVSS5.5AI score0.00593EPSS
SaveExploits0
CVE
CVE
added 2026/07/20 8:27 p.m.37 views

CVE-2026-58624

The CVE affects SSH servers implemented with Apache MINA SSHD that use the GitPgmCommandFactory. The root cause is improper input validation in the sshd-git GitPgmCommandFactory, which allowed an authenticated SSH user to run any JGit command, including commands that could write files on the serv...

5.4CVSS5.7AI score0.00424EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/07/20 8:27 p.m.19 views

CVE-2026-58624

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...

5.4CVSS5.5AI score0.00424EPSS
SaveExploits0
Rows per page
Query Builder