io_uring_scanner

iouring 扫描器 基于 iouring 的网络扫描器，使用 Rust 编写。 参见 在 Rust 中构建基于 iouring 的网络扫描器。 支持 3 种扫描模式： TCP 连接 SSH 版本匹配（正则表达式匹配） HTTP 头匹配（对响应头进行正则表达式匹配） 从源码构建 你需要一个带有 nightly 工具链的 Rust 构建环境，可从 rustup 获取。 root@kitploit: cargo build --release binary is built as target/release/iouringscanner 用法 运行 iouringscanner -h...

CVE-2024-6387

OpenSSH CVE Scanner OpenSSH CVE Scannerは、複数のSSHターゲットをOpenSSHバージョンに基づいて脆弱性スキャンするためのPythonスクリプトです。スレッドを使用した並行スキャンを実現し、色付き出力によるログ機能を統合することで、視認性を向上させています。 特徴 マルチスレッドスキャン: スレッドを使用して複数のターゲットを同時にスキャンし、効率を向上させます。 CVE脆弱性検出: 事前定義されたCVE脆弱性リストに対してSSHバージョンをチェックし、バージョンが脆弱かどうかを判定します。 ログと出力:...

CVE-2024-6387-exploit

Escáner de Vulnerabilidades SSH El Escáner de Vulnerabilidades SSH es un script de Python que utiliza Nmap para escanear una lista de dominios en busca de versiones de SSH vulnerables. Comprueba múltiples puertos para detectar servicios SSH e identifica versiones que se sabe que tienen...

CVE-2023-48795

🛡️ Escáner de Vulnerabilidad Terrapin CVE-2023-48795 Una herramienta Python para identificar servidores SSH potencialmente vulnerables a CVE-2023-48795 Terrapin mediante la extracción de banners de versión de OpenSSH a través del puerto 22 usando netcat. 📌 Descripción Este escáner comprueba si un...

EP4-redes

PoC CVE-2018-15473 エクスプロイト https://github.com/Rhynorater/CVE-2018-15473-Exploit から翻案 このエクスプロイトを実行するには、以下がインストールされている必要があります: docker docker compose SSHサーバー まず、古いUbuntuに古いバージョン（6.6）のSSHが含まれているイメージをDockerHubからプルしましょう: すべてのダウンロードには数分かかる場合がありますが、ダウンロードは一度だけ必要です。 root@kitploit: docker pull...

MiracleLinux 9 : openssh-9.9p1-7.el9.ML.1 (AXSA:2026-1095:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1095:06 advisory. OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode CVE-2026-35385 OpenSSH: OpenSSH: Security bypass via...

EulerOS Virtualization 2.13.1 : openssh (EulerOS-SA-2026-2382)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 mishandles the authorizedkeys principals option in uncommon scenarios involving a principals list in conjuncti...

[SECURITY] Fedora 44 Update: openssh-10.2p1-6.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

MiracleLinux 7 : openssh-6.6.1p1-23.el7 (AXSA:2016-037:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-037:01 advisory. SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide...

OPENSUSE-SU-2026:20000-1 Security update for salt

This update for salt fixes the following issues: Changes in salt: - Add minimumauthversion to enforce security CVE-2025-62349 - Backport security fixes for vendored tornado BDSA-2024-3438 BDSA-2024-3439 BDSA-2024-9026 - Junos module yaml loader fix CVE-2025-62348 - Require Python dependencies onl...

EUVD-2001-1456

Malware in sbrugna...

EUVD-2000-0571

Malware in sbrugna...

EUVD-2001-0360

Malware in sbrugna...

ROS-20250922-08

Twisted Web HTTP 1.1 server vulnerability in the twisted.web.http module of the Twisted networking framework is related to the HTTP request processing flaws. Exploitation of the vulnerability allows an attacker acting remotely to gain access to confidential data. remotely to gain access to...

The vulnerability in the transport.py component of the SSHv2 protocol library for Python Paramiko allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the transport.py component in the SSHv2 protocol library for Python Paramiko is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service...

UBUNTU-CVE-2019-17069

PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...

ssh-audit - SSH Server Auditing

ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm information...

SSH Server Auditing: ssh-audit

ssh-audit is a tool for ssh server auditing Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm information...

libssh: bits/bytes confusion resulting in truncated Difffie-Hellman secret length

A type confusion issue was found in the way libssh generated ephemeral secrets for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. This would cause an SSHv2 Diffie-Hellman handshake to use significantly less secure random parameters...

OpenSSH 7.0 Fixes Four Flaws

A new version of OpenSSH has been released, fixing four security vulnerabilities and a number of non-security related bugs. OpenSSH 7.0 includes patches for a use-after-free vulnerability and three other flaws, two of which only affect Portable OpenSSH. The maintainers of the software also gave...