141 matches found
CVE-2023-35793-CSRF-On-Web-SSH
CVE-2023-35793 - Web SSH における CSRF このリポジトリには、Dodge Industrial Team が Dodge OPTIFY プラットフォーム向けに発見した CVE-2023-35793 の説明が含まれています。 CVE ID: CVE-2023-35793 ベンダー: Cassia Networks 製品: Access Controller バージョン: Cassia-AC-2.1.1.2303271039 脆弱性: クロスサイトリクエストフォージェリ CSRF 影響を受けるもの: Web SSH, ゲートウェイ 説明: WebSSH 機能は...
CVE-2018-10933
CVE-2018-10933 - libssh 認証バイパス CVE-2018-10933 の概念実証（Proof-of-Concept）実装です。これは、libssh のサーバーサイド実装に影響する重大な認証バイパス脆弱性です。 免責事項 このリポジトリは、教育目的、脆弱性研究、および許可されたセキュリティテストのためにのみ提供されています。明示的な許可なしにシステムをテストしないでください。 CVE-2018-10933 は、libssh のサーバーサイド状態機械 で発見された重大な認証バイパス脆弱性 です。...
CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
EUVD-2026-74164
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
CVE-2026-78550: Improper Neutralization of Directives in Dynamically Evaluated Code
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
PT-2026-88427
The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...
PT-2026-78690
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...
CVE-2026-49864
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-49864
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-49864 wetty vulnerable to DOM XSS via file-download filename
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-44423 ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data
ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated user can read session records SSH username, device UID, remote IP, terminal type, authenticated fla...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the GetSession function. An attacker can access sensitive SSH session data belonging to other tenants by providing a valid session UID and authenticating with any user account...
TencentOS Server 3: libssh (TSSA-2025:0983)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0983 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
libssh: Incorrect Return Code Handling in ssh_kdf() in libssh
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...
EUVD-2016-3314
Malware in sbrugna...
EUVD-2015-6331
Malware in sbrugna...
EUVD-2016-0763
Malware in sbrugna...