Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

Kopia Server 0.23.0 - Remote Code Execution

Kopia before version 0.23.0 allows unauthenticated remote code execution when started in server mode with the --without-password flag. When the /api/v1/repo/exists endpoint is exposed, it enables instantiation of the SFTP storage backend with user-supplied sshArguments. Due to improper argument...

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

Rucio: Unauthenticated administrator impersonation through SSH challenge tokens

Summary SSH challenge tokens are mistakenly accepted as valid credentials during the authentication token validation process. While an SSH challenge token is intended as a short-lived nonce for use in a subsequent SSH key exchange, the function to validate authentication tokens does not...

CVE-2026-86324

A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...

EUVD-2026-124677

A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...

CVE-2026-86324 Foreman: authorization flaw in the foreman::controller::useraware handling used by api::v2::sshkeyscontroller

A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...

CVE-2026-86324

A flaw in Foreman 's Api::V2::SshKeysController allows for an authorization bypass because the system resolves the target user via Foreman::Controller::UserAware#find_user using User.find(params[:user_id]) without enforcing required parent-user authorization checks. An attacker possessing the cre...

CVE-2026-86324

A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::Controller::UserAwarefinduser using User.findparams:userid without enforcing the required parent-user authorization check. An attacker with the createsshkeys permission can exploit this...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

CVE-2024-6387-Checker

CVE-2024-6387-Checker This tool scans your network for hosts running vulnerable versions of OpenSSH CVE-2024-6387. It can handle single IPs, multiple IPs, CIDR ranges, and CSV files with custom ports. Requirements Install the required libraries using pip: pip install paramiko netaddr pandas...

MasterParser

MasterParser v2.5 Stop wasting time, let MasterParser do the work! Created & Maintained by: Eilay Yosfan What is MasterParser ? MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifical...

CVE-2018-10933

CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. SOME DETAILS The issue comes from the way libssh doesn't maintain sta...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Tool Introduction Quick exploitation tool for CVE-2022-40684, beginner code, feel free to submit issues if you find any Usage main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Disclaimer This tool is only intended for legally authorized enterprise security practices...

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

CVE-2018-15473_exploit

CVE-2018-15473 - OPENSSH 7.7 USER ENUMERATION dependency: https://github.com/pyperanger/crypt-curve25519 Fix Patch https://metacpan.org/pod/Net::SSH::Perl References https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5 https://isc.sans.edu/diary/24004...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...

swift-nio-ssh

SwiftNIO SSH This project contains SSH support using SwiftNIO. What is SwiftNIO SSH? SwiftNIO SSH is a programmatic implementation of SSH: that is, it is a collection of APIs that allow programmers to implement SSH-speaking endpoints. Critically, this means it is more like libssh2 than openssh...

CVE-2018-15473

CVE-2018-15473 - SSH Username Enumeration Exploit A tool for enumerating valid usernames on vulnerable SSH servers OpenSSH 2.3 through 7.7. 📋 Vulnerability Description CVE-2018-15473 allows enumeration of existing users on SSH servers by sending malformed authentication packets. The server respon...