sshconfig-lint

sshconfig-lint 一个引擎，适用于 SSH 配置发生变更的所有场景。 sshconfig-lint 可发现 OpenSSH 客户端配置中的语义错误：重复主机、损坏的身份文件路径、不安全选项、弱算法、通配符顺序以及错综复杂的 Include 链。在本地、Git 钩子、GitHub Actions 和编辑器中均可使用相同的规则代码。 试用私有浏览器演练场 · 通过交互式示例学习 · 阅读所有规则 浏览器检查器在您的设备上运行。配置内容不会被上传，也不会收集任何遥测数据。 快速开始 root@kitploit: check /.ssh/config sshconfig-lint...

sshconfig-lint v0.5.0

sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...

HPE Intelligent Management Center (iMC) sshconfig expression language injection remote code execution vulnerability (CNVD-2020-58754)

HPE Intelligent Management Center is a suite of network intelligence management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

Remote code execution

A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7182

A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7182

CVE-2020-7182 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The vulnerability is a sshConfig expression language injection in the sshConfig.xhtml handling of the beanName parameter, allowing remote code execution. ZDI notes that authentication ...

(0Day) Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Trend Micro InterScan Web Security Virtual Appliance SSHConfig Remote Root RCE

Remote command execution vulnerability in Trend Micro InterScan Web Security Virtual Appliance SSHConfig Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...