1322 matches found
CVE-2020-15778-SCP-Command-Injection-Check
CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...
ssh-mitm
SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...
reverse_ssh
Reverse SSH Art credit to https://www.instagram.com/smart.hedgehog.art/ Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax Dynamic, local and remote forwarding Native SCP and SFTP implementations for retrieving files from your targets Full...
CVE-2016-2434
CVE-2016-2434...
egression
Description EGRESSION is a tool that provides an instant view of how easy it is to upload sensitive data from any given network. It starts with a sensitive file with these contents, which is stored locally in plaintext. This file is used to test the egress / DLP controls on the network by...
CVE-2020-15778
Write up for CVE id CVE-2020-15778. Discoverd by : Chinmay Pandya Email address : [email protected] Linkedin : www.linkedin.com/in/chinmay-pandya Vulnerability title: scp in OpenSSH 8.3p1 allows eval injection. Product: Openssh Affected Component: SCP Vulnerable version: Fixed version: - CVE...
Go-SCP
You can download this book in the following formats: PDF, Mobi and ePub. Introduction Go Language - Web Application Secure Coding Practices is a guide written for anyone who is using the Go Programming Language and aims to use it for web development. It was originally created by Checkmarx Securit...
CVE-2020-15778
CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client cd client docker build -t client-cve . cd server docker build -t server-cve . 2. Spin up the scp server in container. docker run -d -P --name scp-server server-cve Retrieve...
EulerOS Virtualization 2.15.1 : curl (EulerOS-SA-2026-4547)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could...
EulerOS Virtualization 2.15.0 : curl (EulerOS-SA-2026-4589)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could...
EulerOS Virtualization 2.15.0 : openssh (EulerOS-SA-2026-4831)
According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authenticatio...
EulerOS Virtualization 2.15.0 : libssh (EulerOS-SA-2026-4604)
According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability exists in libssh when processing paths received from SCP servers. Attackers can bypass security...
EulerOS Virtualization 2.15.1 : openssh (EulerOS-SA-2026-4772)
According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authenticatio...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Be sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound...
EulerOS 2.0 SP12 : openssh (EulerOS-SA-2026-4507)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.CVE-2026-59999 sshd in...
EulerOS 2.0 SP12 : openssh (EulerOS-SA-2026-4430)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.CVE-2026-59999 sshd in...
curl: curl: Man-in-the-middle attack via SSH host key bypass
A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPTSSHKEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the knownhosts file. The callback...
SUSE-SU-2026:24478-1 Security update for openssh
This update for openssh fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files bsc1271044. - CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended target directory bsc1271046. -...
Security update for openssh
This update for openssh fixes the following issues: CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files bsc1271044. CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended target directory bsc1271046. CVE-2026-59997:...
Security Bulletin: IBM MQ Console is affected by a relative path traversal vulnerability (CVE-2026-78254)
Summary IBM MQ Console has addressed a relative path traversal vulnerability Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the...