CVE-2026-46595-proof

Доказательство CVE-2026-46595 https://vulners.com/cve/CVE-2026-46595 — это https://pkg.go.dev/vuln/GO-2026-5023 уязвимость в символе golang.org/x/crypto/ssh NewServerConn, как указано во второй ссылке. Этот репозиторий содержит простую программу, демонстрирующую положительную проверку уязвимости...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...

cve-2025-32433

Build » git clone https://github.com/0xPThree/cve-2025-32433.git && cd cve-2025-32433 » docker build -t erlang-ssh . » docker run -d --name erlang-ssh -p 2222:2222 erlang-ssh POC kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

CVE-2021-3130

CVE-2021-3130 Suggested description Within the Open-AudIT up to 4.0.2 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the...

cve-2016-20012

CVE-2016-20012 SSH Username Enumeration Script This Python script attempts to enumerate valid usernames on an SSH server by trying to connect with an invalid password. It measures the response time for each username to identify possible valid accounts based on server behavior. Table of Contents...

CVE-2024-6387

OpenSSH CVE Scanner The OpenSSH CVE Scanner is a Python script designed to scan multiple SSH targets for vulnerabilities based on their OpenSSH version. It utilizes threading for concurrent scanning and integrates logging with colored output for enhanced visibility. Features Multi-threaded...

CVE-2018-15473

CVE-2018-15473 OpenSSH 7.7 - Username Enumeration Method The attacker can try to authenticate a user with a malformed packet for example, a truncated packet, and: if the user is invalid it does not exist, then userauthpubkey returns immediately, and the server sends an SSH2MSGUSERAUTHFAILURE to t...

cve-2023-38408

CVE-2023-38408: Understanding and Simulating a Real-World SSH-Agent Vulnerability Table of Contents 1. Introduction 2. Background Concepts 3. The CVE-2023-38408 Vulnerability 4. Practical Simulation and Testing 5. Technical Analysis 6. Fix and Mitigation 7. Conclusion 1. Introduction Purpose of...

cve-2025-32433-erlang_ssh_rce_reproduction

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

CVE-2022-40684

CVE-2022-40684 One-click enumeration of all usernames and writing SSH public key Integrated and optimized the code from these two repositories to achieve one-click enumeration of all usernames and writing SSH public key results: https://github.com/carlosevieira/CVE-2022-40684/blob/main/exploit.py...

sshfinder

sshfinder Find every SSH service on your network, judge whether it meets your standard, and get told when that changes. sshfinder is a single Python file with no required dependencies. Point it at a CIDR range and it discovers SSH wherever it is actually listening — not just port 22 — confirms ea...

cyber-decoy

cyber-decoy A containerized network decoy honeypot that advertises SSH , RDP , and SMB , observes every inbound connection with eBPF , and reverse-proxies each session into an isolated decoy container. The design separates two concerns: 1. Observation. An eBPF TC classifier attached to the broker...

XZ-Utils_CVE-2024-3094

Vulnerability Overview XZ is a data compression format present in almost every Linux distribution. liblzma is an open-source software library that handles XZ compression format. On March 29, developers discovered a supply chain attack on the XZ package, tracing it to a backdoor trojan implanted i...

ssh_exploiter_CVE-2024-6387

sshexploiter CVE-2024-6387 with auto ip scanner and auto expliot OpenSSH Vulnerability Checker & Exploiter This Python script checks if servers are running vulnerable versions of OpenSSH and attempts exploitation if possible. Features SSH Version Detection : Retrieves SSH banner to determine the...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

CVE-2017-1000117

CVE-2017-1000117 This module can be used to test whether you are vulnerable to CVE-2017-1000117 git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Output if you are vulnerable: $ git clone https://github.com/timwr/CVE-2017-1000117.git...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

apache__mina-sshd_CVE-2023-35887_2-9-2

Apache MINA SSHD Apache MINA SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. It does not aim at being a replacement for the SSH client or SSH server from Unix operating systems, but rather provides support for Java based applications requiring SSH...