134 matches found
CVE-2023-35793-CSRF-On-Web-SSH
CVE-2023-35793-Web-SSH上的CSRF 此仓库包含Dodge工业团队在Dodge OPTIFY平台中发现的CVE-2023-35793的描述。 CVE ID: CVE-2023-35793 厂商: Cassia Networks 产品: Access Controller 版本: Cassia-AC-2.1.1.2303271039 漏洞: 跨站请求伪造 CSRF 影响: Web SSH, 网关 描述: WebSSH功能可通过CSRF初始化。 状态: 厂商确认，已修复 修复版本: Cassia-AC-2.1.1.2308181707 详情...
CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
EUVD-2026-74164
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
CVE-2018-10933
CVE-2018-10933 - libssh 认证绕过 针对 CVE-2018-10933 的概念验证实现，这是影响 libssh 服务端实现的一个严重认证绕过漏洞。 免责声明 本仓库仅用于教育目的、漏洞研究和授权安全测试。未经明确许可，切勿对任何系统进行测试。 CVE-2018-10933 是在 libssh 服务端状态机 中发现的一个严重认证绕过漏洞 。 与涉及弱密码或加密弱点的传统认证缺陷不同，该漏洞之所以存在，是因为服务端错误地信任了一个本应始终从服务端发送到客户端 的协议消息。 因此，攻击者可以说服存在漏洞的 libssh 服务端，使其相信认证已成功完成，而无需提供任何凭证 ...
PT-2026-78690
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...
CVE-2026-49864
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-49864
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-49864 wetty vulnerable to DOM XSS via file-download filename
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-44423 ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data
ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated user can read session records SSH username, device UID, remote IP, terminal type, authenticated fla...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the GetSession function. An attacker can access sensitive SSH session data belonging to other tenants by providing a valid session UID and authenticating with any user account...
TencentOS Server 3: libssh (TSSA-2025:0983)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0983 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
libssh: Incorrect Return Code Handling in ssh_kdf() in libssh
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...
EUVD-2013-0001
Malware in sbrugna...
EUVD-2011-2538
Malware in sbrugna...
EUVD-2016-0763
Malware in sbrugna...
EUVD-2015-6331
Malware in sbrugna...
EUVD-2012-1364
Malware in sbrugna...
EUVD-2016-3314
Malware in sbrugna...