Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the ProxyCommand process. An attacker can execute arbitrary commands on the system by injecting malicious input into the SSH ProxyCommand configuration. Remediation Upgrade github.com/kopia/kopia/cli to...

curl 安全漏洞

Curl is a cURL open source tool for transferring data from or to a server. A security vulnerability exists in curl that stems from curl incorrectly using a local SSH proxy for public key authentication...

Teleport 操作系统命令注入漏洞

Teleport is an identity-aware, multi-protocol access agent from Teleport, Inc. for engineers and security professionals to unify access to SSH servers, Kubernetes clusters, web applications and databases across all environments. Teleport version 9.3.6 suffers from an operating system command...