19934 matches found
CVE-2023-38408
The PKCS#11 feature in ssh-agent within OpenSSH (versions prior to 9.3p2 ) contains an insufficiently trustworthy search path . This flaw allows a remote attacker to achieve remote code execution if a user's agent is forwarded to an attacker-controlled system, as code in /usr/lib may be unsafely ...
[slackware-security] openssh
New openssh packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-9.3p2-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: ssh-agent1 in OpenSSH between and 5.5 and 9.3p1...
Network_Assessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor
With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor. This Python script analyzes network traffic in a given .pcap file and attempts to detect the following suspicious network activities and attack...
CVE-2023-38408
The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...
PT-2023-3666
Name of the Vulnerable Software and Affected Versions OpenSSH versions 7.9p1-alt4.gost.p10.1, 7.9p1-alt4.p10.6, 9.6p1-alt1.gost, 9.6p1-alt2.gost Description OpenSSH contains a vulnerability where the ssh-agent component incorrectly handles loading certain PKCS11 providers. This can allow a remote...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection. The PKCS11 feature in ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Note: This issue exists...
Slackware Linux 15.0 / current openssh Vulnerability (SSA:2023-200-02)
The version of openssh installed on the remote host is prior to 9.3p2. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-200-02 advisory. - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code...
UBUNTU-CVE-2023-38408
The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...
Improper Certificate Validation
cryptography is vulnerable to Improper Certificate Validation. The vulnerability exists due to the parseextsopts function in ssh.py because loading ssh certificates generated with ssh-keygen or SSHCertificateBuilder yields unexpected results which potentially allows an attacker to perform...
SUSE CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
auto-cve-2022-44268 Automating expl...
Icinga Web 2.10 - Authenticated Remote Code Execution Exploit
!/usr/bin/env python3 Exploit Title: Icinga Web 2.10 - Authenticated Remote Code Execution Exploit Author: Dante CoronaAka. cxdxnt Software Link: https://github.com/Icinga/icingaweb2 Vendor Homepage: https://icinga.com/ Software Link: https://github.com/Icinga/icingaweb2 Version: 2.8.6, 2.9.6, 2....
CVE-2023-37268
Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been...
Authentication flaw
Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been...
cryptography mishandles SSH certificates
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
CVE-2023-37268 User login confusion with SSO in warpgate
Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been...
CVE-2023-37268 User login confusion with SSO in warpgate
Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been...
CVE-2023-37268 User login confusion with SSO in warpgate
Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been...
CVE-2023-37268
CVE-2023-37268 affects Warpgate, a Linux bastion host providing SSH/HTTPS/MySQL access. The issue allows an attacker to log in as another user when the attacker’s account uses SSO, enabling credential-forgery if the target account has no second factor. The root cause is an authorization flaw tied...