Coverage tagged "SSH".
It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket send path. An attacker could possibly use this issue to obtain sensitive information…
Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer Initial announcement and feature breakdown of Warden Stealer on the Exploit.in dark web forum. A highly…
An analysis of medical devices indicates that healthcare organizations face a significant risk of future quantum-enabled attacks, as only a small percentage are capable of supporting a transition to…
The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of…
Posted by Damien Miller on Oct 06 OpenSSH 10.6 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol 2.0…
Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid mailboxes, and take deeper control of compromised…
Today, Cloudflare Workers is adding support for post-quantum-resistant algorithms within Web Crypto.
Posted by Thomas Wolf on Sep 29 Severity: critical CVSS 3.1: 9.1 (critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected versions: - Apache MINA SSHD 1.2.0 before 2.20.0 - Apache MINA SSHD…
Posted by Thomas Wolf on Sep 29 Severity: moderate CVSS 3.1: 7.5 (high) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected versions: - Apache MINA SSHD 0.9.0 before 2.20.0 - Apache MINA SSHD…
Posted by Thomas Wolf on Sep 29 Severity: moderate CVSS 3.1: 6.5 (medium) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected versions: - Apache MINA SSHD before 2.20.0 - Apache MINA SSHD 3.0.0-M1…
Posted by Thomas Wolf on Sep 29 Severity: moderate CVSS 3.1: 6.5 (medium) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected versions: - Apache MINA SSHD before 2.20.0 - Apache MINA SSHD 3.0.0-M1…
Posted by Thomas Wolf on Sep 29 Severity: important CVSS 3.1: 8.1 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected versions: - Apache MINA SSHD before 2.20.0 - Apache MINA SSHD 3.0.0-M1…
Posted by Thomas Wolf on Sep 29 Severity: critical CVSS 3.1: 9.1 (critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected versions: - Apache MINA SSHD (org.apache.sshd:sshd-core) 2.0.0 before…
Posted by Jean-Baptiste Onofré on Sep 28 Severity: moderate Affected versions: - Apache Karaf before 4.4.12 Description: Apache Karaf's shell/SSH command security is enforced by per-scope ACL…
It was discovered that phpseclib did not perform constant-time padding validation when using AES in CBC mode. A remote attacker could possibly use this issue to obtain sensitive information…
A former US Army soldier has been sentenced to 70 months in prison for hacking telecoms companies, stealing sensitive records, and trying to extort more than $1 million from his victims. Cameron John…
Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account…
