xz-vulnerable-honeypot

xz-vulnerable-honeypot SSH-хоніпот с бэкдором XZ. CVE-2024-3094 TODO : подключить бэкдор и/или sshd. логировать RSA-ключи для расшифровки. заметки: https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504 https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01...

CVE-2026-20182

CVE-2026-20182 — Обход аутентификации Cisco Catalyst SD-WAN Controller / Manager Эксплойт класса proof-of-concept для CVE-2026-20182 , критического CVSS 10.0 обхода аутентификации в службе vdaemon DTLS UDP/12346 на Cisco Catalyst SD-WAN Controller vSmart и Manager vManage. Раскрытие: 14 мая 2026...

DEBIAN-CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CLEANSTART-2026-WK54237 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop

CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...

CLEANSTART-2026-YR68258 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

CVE-2026-46595 affects multiple packages. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped. See references for individual vulnerability...

CLEANSTART-2026-ZJ64953 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users

Security vulnerability affects the prometheus-redis-exporter-fips package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users...

CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

PT-2026-106292

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

Brocade Fabric OS command injection vulnerability in PAM session cleanup routines (CVE-2026-94579)

: An OS command injection vulnerability exists in the PAM Pluggable Authentication Module session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service...

Command injection vulnerability exists in the REST API management interface of Brocade Fabric OS (CVE-2026-94581)

: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

PT-2026-107169

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description When the built-in SSH server is enabled via the START SSH SERVER variable, the system performs a lookup of the presented public key using an SQL LIKE comparison of its encoded content. Because...

MikroTik RouterOS Improper Enforcement of Behavioral Workflow (CVE-2026-67279)

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

CVE-2024-3094

CVE-2024-3094 Автор: https://gist.github.com/Sn0w3y Этот скрипт определяет, вероятно ли, что бинарный файл ssh в системе уязвим к CVE-2024-3094. В отличие от скрипта обнаружения, изначально написанного Вегардом Носсумом, этот не использует hexdump, поскольку на большинстве дистрибутивов его...

sshelf

sshelf Fuzzy-search your SSH hosts and connect in two keystrokes. sshelf keeps its own host list, builds the ssh command for you, and then gets out of the way. It hands the terminal to real OpenSSH and never touches /.ssh/config. Install macOS and Linux, x8664 and arm64. The prebuilt packages nee...

CVE-2017-1000117

CVE-2017-1000117 Présentation du projet L'un des sujets du projet de conception du cours de sécurité réseau Reproduction de la vulnérabilité CVE-2017-1000117 PoC+Exp Git + SSH Résumé de la vulnérabilité : Nom de la vulnérabilité : Vulnérabilité d'injection de commande Git Identifiant CNNVD :...

CVE-2025-32433-Detection

Обнаружение CVE-2025-32433 Автор: te0rwx Создано: 2025-08-27 Обновл. 2026-08-16 Описание Пользовательское правило YARA для обнаружения известных артефактов, связанных с CVE-2025-32433 , уязвимостью удаленного выполнения кода RCE в Erlang/OTP SSH до этапа аутентификации. Правило было разработано и...