ssh-audit

ssh-audit ssh-audit est un outil pour l'audit de serveurs SSH. Fonctionnalités Support des protocoles serveur SSH1 et SSH2 ; Récupération de la bannière, reconnaissance de l'appareil ou du logiciel et du système d'exploitation, détection de la compression ; Collecte des algorithmes d'échange de...

cve-2020-5260

cve-2020-5260 HTTP-конечная точка PoC для cve-2020-5260, которую можно развернуть на Heroku ИНФОРМАЦИЯ ОБ АВТОРЕ Felix Wilhelm из Google Project Zero https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 Запуск уязвимости git clone...

AZL-106685 CVE-2026-106583 affecting package openssh 9.8p1-10

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...

PT-2026-107387

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...

CVE-2026-106584

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

CVE-2026-106585

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...

CVE-2026-106582

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command- line username, leading to injection...

mallory

mallory Proxy HTTP/HTTPS via SSH. Installation Machine locale : go install github.com/justmao945/mallory/cmd/mallory@latest Serveur distant : besoin de notre vieil ami sshd Configuration Fichier de configuration Le chemin par défaut est $HOME/.config/mallory.json, peut être défini au lancement du...

AZL-106691 CVE-2026-106585 affecting package openssh 9.8p1-10

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...

AZL-106694 CVE-2026-106582 affecting package openssh 9.8p1-10

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...

DEBIAN-CVE-2026-106584

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

DEBIAN-CVE-2026-106585

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...

DEBIAN-CVE-2026-106582

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...

AZL-106703 CVE-2026-106584 affecting package openssh 9.8p1-10

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

CVE-2026-106582

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...

CVE-2026-106585

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...

CVE-2026-106584

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

CVE-2026-106585

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...