19316 matches found
CBL Mariner 2.0 Security Update: erlang (CVE-2025-32433)
The version of erlang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32433 advisory. - Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3,...
Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server: April 2025
On April 16, 2025, a critical vulnerability in the Erlang/OTP SSH server was disclosed. This vulnerability could allow an unauthenticated, remote attacker to perform remote code execution RCE on an affected device. The vulnerability is due to a flaw in the handling of SSH messages during the...
Security update for podman
This update for podman fixes the following issues: CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh bsc1239330. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...
SUSE-SU-2025:20198-1 Security update for podman
This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh bsc1239330...
SUSE-SU-2025:1356-1 Security update for erlang26
This update for erlang26 fixes the following issues: - CVE-2025-30211: Fixed KEX init error results with excessive memory usage bsc1240390 - CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH bsc1241300...
Unspecified Vulnerability in JetBrains Toolbox App
JetBrains Toolbox App is an application for managing JetBrains development tools that helps users install, update and manage multiple JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from unencrypted transmission of credentials during SSH...
JetBrains Toolbox App Command Injection Vulnerability
JetBrains Toolbox App is an application for managing JetBrains development tools, providing installation, update, and management capabilities. JetBrains Toolbox App suffers from a command injection vulnerability that stems from the SSH plugin handling input improperly. An attacker could exploit t...
Unspecified Vulnerability in JetBrains Toolbox App
JetBrains Toolbox App is an application for managing and updating JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from a lack of sufficient user validation when establishing a connection. An attacker could exploit the vulnerability to establish an...
Unspecified Vulnerability in JetBrains Toolbox App (CNVD-2025-13584)
JetBrains Toolbox App is an application for managing JetBrains development tools, providing the ability to install, update and manage multiple JetBrains tools. A security vulnerability exists in JetBrains Toolbox App that stems from the lack of authentication of the host key in the SSH plugin. An...
Debian dsa-5906 : erlang - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5906 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5906-1 [email protected] https://www.debian.org/securit...
FreeBSD : Erlang -- Erlang/OTP SSH Vulnerable to Pre-Authentication RCE (06269ae8-1e0d-11f0-ad0b-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 06269ae8-1e0d-11f0-ad0b-b42e991fc52e advisory. [email protected] reports: Erlang/OTP is a set of libraries for the Erlang programming...
[SECURITY] [DLA 4132-1] erlang security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4132-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès April 21, 2025 https://wiki.debian.org/LTS -...
Exploit for Unquoted Search Path or Element in Openbsd Openssh
OpenSSH Vulnerability - CVE-2023-38408 :books: Introduct...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-3243...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
Build bash » git clone https://github.com/0xPThree/cve-202...
Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems
Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. The packages in question are listed below - node-telegram-utils 132 downloads node-telegram-bots-api...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
Vulnerable Application Erlang/OTP is a set of libraries for...
OESA-2025-1439 openssh security update
OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...