132 matches found
CVE-2023-35793-CSRF-On-Web-SSH
CVE-2023-35793-CSRF-On-Web-SSH रिपॉजिटरी में CVE-2023-35793 का विवरण है जिसे Dodge Industrial Team ने Dodge OPTIFY प्लेटफ़ॉर्म के लिए खोजा। CVE ID: CVE-2023-35793 विक्रेता: Cassia Networks उत्पाद: Access Controller संस्करण: Cassia-AC-2.1.1.2303271039 दोष: Cross Site Request Forgery CSRF प्रभावित:...
CVE-2018-10933
CVE-2018-10933 - libssh प्रमाणीकरण दरकिनार CVE-2018-10933 के लिए प्रूफ-ऑफ-कॉन्सेप्ट कार्यान्वयन, जो libssh के सर्वर-साइड कार्यान्वयन को प्रभावित करने वाली एक गंभीर प्रमाणीकरण दरकिनार भेद्यता है। अस्वीकरण यह रिपॉजिटरी केवल शैक्षिक उद्देश्यों, भेद्यता अनुसंधान और अधिकृत सुरक्षा परीक्षण के लिए प्रदा...
PT-2026-78690
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...
CVE-2026-49864
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-49864
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-49864 wetty vulnerable to DOM XSS via file-download filename
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-44423 ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data
ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated user can read session records SSH username, device UID, remote IP, terminal type, authenticated fla...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the GetSession function. An attacker can access sensitive SSH session data belonging to other tenants by providing a valid session UID and authenticating with any user account...
TencentOS Server 3: libssh (TSSA-2025:0983)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0983 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
libssh: Incorrect Return Code Handling in ssh_kdf() in libssh
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...
EUVD-2011-2538
Malware in sbrugna...
EUVD-2012-4938
Malware in sbrugna...
EUVD-2015-6331
Malware in sbrugna...
EUVD-2016-3314
Malware in sbrugna...
EUVD-2016-0763
Malware in sbrugna...
EUVD-2012-1364
Malware in sbrugna...
EUVD-2013-0001
Malware in sbrugna...
EUVD-2005-1023
Malware in sbrugna...