Erlang/OTP SSH Application Detection

Binary data erlangotpsshdetect.nbin...

The vulnerability of the SSH protocol implementation in the Erlang/OTP library lies in the lack of authentication checks for a critical function, allowing attackers to execute arbitrary code.

The vulnerability of the SSH protocol implementation in the Erlang/OTP library set is related to the lack of authentication checks for a critical function. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code by sending specially crafted SSH packets...

Erlang/OTP SSH RCE (OTP-19595)

The Erlang/OTP SSH applicaiton installed on the remote host is 4.15.x 4.15.3.12, 5.1.x 5.1.4.8, 5.2.x 5.2.10. Therefore, it is affected by a remote code execution vulnerability due to a flaw in the SSH protocol message handling. An unauthenticated, remote attacker can exploit this to bypass...

Siemens SENTRON 7KT PAC1260 Data Manager Access Control Error Vulnerability

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. An Access Control Error vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager, which originates from an unauthenticated SSH service enabled endpoint, and can be...

CVE-2023-5616

A flaw was found in the GNOME Control Center. This vulnerability allows the SSH service to be improperly enabled without properly managing systemd units, which could unintentionally expose remote login access through insecure service activation management. Mitigation Mitigation for this issue is...

Researchers Find CVSS 10.0 Severity RCE Vulnerability in Erlang/OTP SSH

Security researchers report CVE-2025-32433, a CVSS 10.0 RCE vulnerability in Erlang/OTP SSH, allowing unauthenticated code execution on exposed…...

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

CVE-2025-43014

CVE-2025-43014 affects JetBrains Toolbox App prior to 2.6, specifically the SSH plugin, which established connections without sufficient user confirmation. The available connected documents confirm this vulnerability exists in versions before 2.6 and describe the issue as a lack of proper user va...

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

CVE-2025-43012

JetBrains Toolbox App prior to version 2.6 is affected by a vulnerability in the SSH plugin that enables command injection due to improper input handling. Reported as CVE-2025-43012, the issue can permit arbitrary code execution with network access and no user interaction required, as reflected b...

CVE-2025-43013

JetBrains Toolbox App prior to version 2.6 is affected by CVE-2025-43013 due to unencrypted credential transmission during SSH authentication. The issue is documented across multiple sources (Red Hat, NVD, CNVD, Nessus plugin, and PT Security) and is tied specifically to the SSH plugin’s handling...