PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...

sshkey-grab

sshkey-grab This script uses a bug in ssh-agent that allows it to pull the last key added to the agent. This may allow the ability to recover a key that has been removed from ssh-agent via ssh-add -t, -d, or -D, provided that the ssh-agent was not terminated and a new key has not been added since...

vault-conductor

🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features...

CVE-2023-38408

OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...

linuxprivcheck

linuxprivcheck Python script for privilege escalation for Linux Original author is Mike Czumak Tv3rn1x -- @SecuritySift. Scripts old-linuxprivchecker.py: Famous linuxprivchecker.py Python with updates - I'll not update it anymore. linuxprivchecker3.py: Famous linuxprivchecker.py, compatible both...

Security Bulletin: Multiple vulnerabilities in OpenSSH affect AIX

Summary There are multiple vulnerabilities in OpenSSH used by AIX CVE-2026-73281,CVE-2026-73282, CVE-2026-73283. OpenSSH is used by AIX for remote login. Vulnerability Details CVEID:CVE-2026-73281 DESCRIPTION: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intend...

Multiple vulnerabilities in OpenSSH affect AIX

IBM SECURITY ADVISORY First Issued: Fri Sep 11 03:21:05 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/opensshadvisory22.asc Security Bulletin: Multiple vulnerabilities in OpenSSH affect AIX...

CVE-2023-38408

Referencia / información https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...

cve-2023-38408

CVE-2023-38408: Understanding and Simulating a Real-World SSH-Agent Vulnerability Table of Contents 1. Introduction 2. Background Concepts 3. The CVE-2023-38408 Vulnerability 4. Practical Simulation and Testing 5. Technical Analysis 6. Fix and Mitigation 7. Conclusion 1. Introduction Purpose of...

CVE-2023-38408

Vulnerabilidad en OpenSSH - CVE-2023-38408 📚 Introducción Se encontró una vulnerabilidad en OpenSSH antes de la versión 9.3p2. La funcionalidad PKCS11 en el ssh-agent de OpenSSH tiene una ruta de búsqueda insuficientemente confiable, lo que conduce a la ejecución remota de código si un agente se...

OESA-2026-3673 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the...

OESA-2026-3674 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the...

USN-8721-1: OpenSSH vulnerabilities

It was discovered that OpenSSH's ssh-agent incorrectly handled interactions between agent locking and the [email protected] extension. A remote attacker with access to a forwarded agent connection could possibly use this issue to perform operations that should only be available locally, su...

USN-8721-1 openssh vulnerabilities

It was discovered that OpenSSH's ssh-agent incorrectly handled interactions between agent locking and the [email protected] extension. A remote attacker with access to a forwarded agent connection could possibly use this issue to perform operations that should only be available locally, su...

CVE-2017-1000082

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49649 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45702 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45721 2026-09-02 01:01:58+00:00| seen|...

Astra Linux – Vulnerability in OpenSSH

The PKCS11 feature in ssh-agent in OpenSSH prior to version 9.3p2 has an insufficiently trustworthy search path, which can lead to remote code execution if the agent is forwarded to a system controlled by an attacker. The code located in /usr/lib is not necessarily safe for loading into ssh-agent...

openSUSE 16 Security Update : gitea-tea (openSUSE-SU-2026:21603-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21603-1 advisory. Changes in gitea-tea: - Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below bsc1253576: CVE-2025-47913:...

OPENSUSE-SU-2026:21603-1 Security update for gitea-tea

This update for gitea-tea fixes the following issues: Changes in gitea-tea: - Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below bsc1253576: CVE-2025-47913: golang.org/x/crypto/ssh/agent client process termination on an unexpected response to a key listing or signing...

SUSE CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...

JLSEC-2026-1327 In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...