CVE-2018-15473-User-Enumeration-

CVE-2018-15473 – SSH 用户名枚举 一个由我开发的 Python 工具，用于通过利用 CVE-2018-15473 识别有效的 SSH 用户名。 目标信息 服务： SSH 版本： OpenSSH 5.8p1 Debian 1ubuntu3 操作系统： Ubuntu Linux 协议： SSH-2.0 评估： 已针对 CVE-2018-15473（SSH 用户名枚举）进行测试 语言 Python 3 功能特性 使用 Python 3 开发。 通过利用 CVE-2018-15473 枚举有效的 SSH 用户名。 支持自定义用户名字典。 实时显示发现的用户名。...

EUVD-2018-11931

Malware in sbrugna...

EUVD-2015-7203

Malware in sbrugna...

CVE-2024-48460

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

Eugeny Tabby Sends Password Despite Host Key Verification Failure

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

CVE-2024-48460

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

CVE-2019-18265

Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in...

PT-2022-8170 · Digital Alert Systems · Dasdec

Name of the Vulnerable Software and Affected Versions: Digital Alert Systems' DASDEC software versions prior to 4.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The inject...

CVE-2018-1352

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable...

Security Advisory- SSH Username Information Disclosure Vulnerability in Huawei Campus Switch

Some versions of Huawei Campus switch series products S9300/S9300E/S7700/S9700 /S5700/S6700/S5300/S6300/S2300/S2700/S3300/S3700 are affected by username information disclosure vulnerability. When the maintenance terminal of a Huawei Campus switch uses SSH to log in to a server, attackers can gues...

Sysax 5.53 - SSH Username Remote Buffer Overflow Remote Code Execution (Egghunter)

Sysax 5.53 - SSH Username Remote Buffer Overflow Remote Code Execution Egghunter !/usr/bin/python Title: Sysax " sys.exit1 host = sys.argv1 port = intsys.argv2 egghunter = "\x66\x81\xca\xff\x0f\x42\x52\x6a\x02\x58\xcd\x2e\x3c\x05" "\x5a\x74\xef\xb8\x44\x4e\x57\x50\x8b\xfa\xaf\x75\xea\xaf"...