Lucene search
+L

2539 matches found

NVD
NVD
added 2025/11/13 10:15 p.m.14 views

CVE-2025-47913

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

7.5CVSS0.00623EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/13 10:15 p.m.13 views

AZL-70325 CVE-2025-47913 affecting package packer for versions less than 1.9.5-16

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

7.5CVSS6.7AI score0.00623EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/13 10:15 p.m.7 views

UBUNTU-CVE-2025-47913

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

7.5CVSS6.7AI score0.00623EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/13 9:12 p.m.10 views

GO-2025-4116 Potential denial of service in golang.org/x/crypto/ssh/agent

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

7.5CVSS6.8AI score0.00623EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.7 views

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2023-27538)

libcurl would reuse a previously created connection even when an SSH related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, two SSH settings were...

7.7CVSS6.7AI score0.01255EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2025/11/11 12:0 a.m.5 views

OpenSMTPD Detection (Linux/Unix SSH Login)

SSH login-based detection of OpenSMTPD. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.155746";...

7AI score
SaveExploits0
Metasploit
Metasploit
added 2025/11/08 12:0 a.m.275 views

FreePBX filestore authenticated command injection

This module exploits an authenticated command injection vulnerability CVE-2025-64328 in the FreePBX filestore module. The filestore module allows administrators to configure remote file storage backends SSH, FTP, etc. for backup and file management purposes. The vulnerability exists in the SSH...

8.6CVSS8AI score0.84618EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.8 views

CVE-2025-45378

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials...

9.1CVSS7.3AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/07 12:31 p.m.7 views

OESA-2025-2646 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

3.6CVSS8AI score0.00275EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/11/07 9:30 a.m.9 views

EUVD-2025-38240

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...

6.7AI score0.00399EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/07 7:26 a.m.7 views

CVE-2025-10966 missing SFTP host verification with wolfSSH

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...

4.3CVSS6.1AI score0.00399EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2025/11/07 7:26 a.m.10 views

CVE-2025-10966

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...

4.3CVSS5AI score0.00399EPSS
SaveExploits1
EUVD
EUVD
added 2025/11/06 6:32 p.m.13 views

EUVD-2025-38053

The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative access via SSH on port 4118 with the readwrite password for the admin account...

6.5AI score0.00043EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2025/11/06 12:0 a.m.1 views

CVE-2025-59396

...

6.3AI score0.00043EPSS
SaveExploits3
Cvelist
Cvelist
added 2025/11/06 12:0 a.m.12 views

CVE-2025-59396

...

0.00043EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.10 views

PT-2025-45340

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox versions through 2025-09-10 Description The default configuration of WatchGuard Firebox devices allows administrative access via SSH on port 4118 using the default 'readwrite' password for the 'admin' account. This allows...

9.8CVSS7.3AI score0.00043EPSS
SaveExploits3References12
RedhatCVE
RedhatCVE
added 2025/11/04 11:6 p.m.24 views

CVE-2025-34501

Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services SSH, HTTP, Telnet, SMB, X11 are enabled by default. If an attacker can reach these interfaces - most often through local or near-local access such as...

7CVSS6.8AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/04 1:15 a.m.13 views

CVE-2025-35021

By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections...

6.5CVSS0.00306EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/04 12:23 a.m.7 views

CVE-2025-35021 Abilis CPX Fallback Shell Connection Relay

By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections...

6.5CVSS6.5AI score0.00306EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/03 9:56 p.m.5 views

CVE-2025-34501 Shuffle Master Deck Mate 2 Hard-coded Credentials & Exposed Services

Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services SSH, HTTP, Telnet, SMB, X11 are enabled by default. If an attacker can reach these interfaces - most often through local or near-local access such as...

7CVSS6.5AI score0.00183EPSS
SaveExploits0References2
Rows per page
Query Builder