Lucene search
+L

15420 matches found

RedhatCVE
RedhatCVE
added 2025/04/26 1:18 a.m.27 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

7.5CVSS7.2AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 11:53 p.m.16 views

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

6.5CVSS7AI score0.00189EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 6:47 p.m.27 views

CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

8.3CVSS7.5AI score0.00603EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 5:6 p.m.21 views

CVE-2025-32433

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor...

10CVSS8.8AI score0.98594EPSS
SaveExploits37References1
Github Security Blog
Github Security Blog
added 2025/04/25 3:11 p.m.14 views

Fleet doesn’t validate a server’s certificate when connecting through SSH

Impact A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the knownhosts file. This could allow the execution of a man-in-the-middle MitM attack against Fleet...

7.1AI score0.00434EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2025/04/25 3:11 p.m.9 views

GHSA-XGPC-Q899-67P8 Fleet doesn’t validate a server’s certificate when connecting through SSH

Impact A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the knownhosts file. This could allow the execution of a man-in-the-middle MitM attack against Fleet...

6.3CVSS7.1AI score0.00434EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2025/04/25 12:0 a.m.19 views

Erlang/OTP (Erlang OTP) DoS Vulnerability (Mar 2025) - Windows

Erlang/OTP Erlang OTP is prone to a denial of service DoS vulnerability in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

7.5CVSS7.4AI score0.00436EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/04/25 12:0 a.m.14 views

Erlang/OTP (Erlang OTP) Prefix Truncation Attacks in SSH Specification (Terrapin Attack) - Linux

Erlang/OTP Erlang OTP is vulnerable to a novel prefix truncation attack a.k.a. Terrapin attack in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5.9CVSS6.2AI score0.93305EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.28 views

JetBrains Toolbox App < 2.6 Multiple Vulnerabilities

The version of JetBrains Toolbox App installed on the remote host is prior to 2.6. It is, therefore, affected by multiple vulnerabilities: - In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible CVE-2025-43012 - In JetBrains Toolbox App before 2.6 host key verification...

9.8CVSS5.6AI score0.00603EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/04/25 12:0 a.m.6 views

PT-2025-19348 · Fleet · Fleet

Name of the Vulnerable Software and Affected Versions: Fleet versions prior to v0.10.12 Fleet versions prior to v0.11.7 Fleet versions prior to v0.12.2 Description: A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate whe...

6.3CVSS6.5AI score0.00434EPSS
SaveExploits0References11
OpenVAS
OpenVAS
added 2025/04/25 12:0 a.m.14 views

Erlang/OTP (Erlang OTP) DoS Vulnerability (Feb 2025) - Linux

Erlang/OTP Erlang OTP is prone to a denial of service DoS vulnerability in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

7CVSS6.4AI score0.0048EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/04/25 12:0 a.m.20 views

Erlang/OTP (Erlang OTP) DoS Vulnerability (Feb 2025) - Windows

Erlang/OTP Erlang OTP is prone to a denial of service DoS vulnerability in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

7CVSS6.4AI score0.0048EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/04/25 12:0 a.m.12 views

Erlang/OTP (Erlang OTP) Prefix Truncation Attacks in SSH Specification (Terrapin Attack) - Windows

Erlang/OTP Erlang OTP is vulnerable to a novel prefix truncation attack a.k.a. Terrapin attack in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5.9CVSS6.2AI score0.93305EPSS
SaveExploits4References6
GithubExploit
GithubExploit
added 2025/04/24 7:31 p.m.767 views

Exploit for SQL Injection in Code-Projects Patient_Record_Management_System

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept...

10CVSS8.9AI score0.98594EPSS
SaveExploits39
OpenVAS
OpenVAS
added 2025/04/24 12:0 a.m.135 views

Erlang/OTP (Erlang OTP) Detection (SSH Banner)

SSH banner-based detection of Erlang/OTP Erlang OTP. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/24 12:0 a.m.13 views

The vulnerability of the SSH plugin of the JetBrains Toolbox, a set of development tools, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the SSH plugin of the JetBrains Toolbox developer’s tools is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.4CVSS5.5AI score0.00216EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2025/04/24 12:0 a.m.18 views

Erlang/OTP (Erlang OTP) RCE Vulnerability (Apr 2025) - Windows

Erlang/OTP Erlang OTP is prone to a remote code execution RCE vulnerability in the SSH server component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

10CVSS8.4AI score0.98594EPSS
SaveExploits37References7
BDU FSTEC
BDU FSTEC
added 2025/04/24 12:0 a.m.14 views

The vulnerability of the SSH protocol implementation in the JetBrains Toolbox, a set of development tools, allows attackers to expose protected information.

The vulnerability of the SSH protocol implementation in the JetBrains Toolbox suite of tools is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...

6.9CVSS5.4AI score0.00146EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2025/04/24 12:0 a.m.12 views

Erlang/OTP (Erlang OTP) RCE Vulnerability (Apr 2025) - Linux

Erlang/OTP Erlang OTP is prone to a remote code execution RCE vulnerability in the SSH server component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

10CVSS8.4AI score0.98594EPSS
SaveExploits37References7
Circl
Circl
added 2025/04/23 3:26 p.m.43 views

CISCO-SA-ERLANG-OTP-SSH-XYZZY

creationtimestamp| type| source ---|---|--- 2025-04-23 15:26:17+00:00| exploited| https://github.com/ProDefense/CVE-2025-32433...

9.6AI score
SaveExploits0References1
Rows per page
Query Builder