CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This is a proof of concept for a Server Side Template Injection SSTI & Local File Inclusion LFI vulnerability in CrushFTP. Features Taking leverage of Critical Severity Vulnerabilities in CrushFTP servers through Server Side Template Injectio...

CVE-2018-7750

CVE-2018-7750 an RCE remote command execution approach of CVE-2018-7750 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Erlang vulnerabilities (USN-8901-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8901-1 advisory. Wander Nauta discovered that Erlang incorrectly handled absolute paths when...

Security Bulletin: IBM i is Affected By Relative Path Traversal Vulnerability in OpenSSH [CVE-2026-59995]

Summary IBM i is vulnerable to not properly constraining the location of downloaded files when "sftp server:/path" is used CVE-2026-59995 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-59995 DESCRIPTION: sftp in OpenSSH before 10.4 does not...

USN-8901-1 erlang vulnerabilities

Wander Nauta discovered that Erlang incorrectly handled absolute paths when extracting zip archives. An attacker could possibly use this issue to write arbitrary files outside of the intended directory. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2025-47...

io.github.ousatov-ua:sftp-server (>=1.0.2, <=3.0.3), org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m5) +3 more potentially affected by CVE-2026-94002 via org.apache.sshd:sshd-sftp (>=3.0.0-m1, <=3.0.0-m5)

org.apache.sshd:sshd-sftp MAVEN version =3.0.0-m1, =1.0.2, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m5 Source cves: CVE-2026-94002 Source advisory: MEND:CVE-2026-94002...

Medium: libssh

Issue Overview: A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests. CVE-2026-59844 A flaw was found in libssh. When...

MGASA-2026-0457 Updated erlang package fixes security vulnerabilities

SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...

Updated erlang package fixes security vulnerabilities

SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...

CVE-2026-72903

A flaw was found in Tabby, a terminal emulator. A remote attacker, operating a malicious SFTP server, could exploit a path traversal vulnerability. This occurs when the server returns a specially crafted filename containing backslashes, which are then misinterpreted by Tabby's Windows-native path...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS : libssh2 vulnerabilities (USN-8799-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8799-1 advisory. It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A...

MGASA-2026-0425 Updated libssh packages fix security vulnerabilities

Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...

SUSE SLED15: gvfs / gvfs-backend-afc / gvfs-backend-samba / gvfs-backends / etc (SUSE-SU-2026:4240-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4240-1 advisory. - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when...

SUSE-SU-2026:4200-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

Astra Linux – Vulnerability in sshfs-fuse

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server could return absolute symlink targets or relative targets containing parent-directory components, which SSHFS would pass through FUSE for resolution by the client kernel against the loc...

SUSE CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

CVE-2021-38312

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:25+00:00| seen| https://t.me/hackingAttack/22318 2026-09-02 01:02:59+00:00| seen| https://t.me/hackingAttack/22318 2026-09-07 18:00:05+00:00| seen| https://t.me/hackingAttack/22318 2026-09-08 00:00:37+00:00| seen|...

libssh: libssh: denial of service via oversized SFTP read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

libssh: libssh: denial of service via oversized SFTP read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

K000163156: Multiple libssh vulnerabilties

Security Advisory Description CVE-2026-15370 A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names...