Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Impact Analysis: regreSSHion OpenSSH Vulnerability (CVE-2024-6387)

netspi.com | vulnerability | CVE-2024-6387 | #rce | #vulnerability-management | #linux | #openssh | #cve-2024-6387

Summary

regreSSHion (CVE-2024-6387) is an unauthenticated RCE in OpenSSH sshd on glibc-based Linux, reviving a 2006 flaw. Mass exploitation is unlikely, but prompt patching and monitoring remain essential.
CVE
CVE-2024-6387
Published
Collected

original ↗

Related coverage

vulnerability · wiz.io
RCE vulnerability in OpenSSH: everything you need to know
CVE-2024-6387 (regreSSHion) is an unauthenticated root RCE in OpenSSH's server—a signal handler race on glibc-based Linux; mass exploitation is deemed unlikely, but prompt patching is advised.
vulnerability · bishopfox.com
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
CVE-2026-28326 is an unauthenticated RCE in SolarWinds ARM where a hardcoded shared secret on TCP 55555 leads to SYSTEM-level code execution. Patch now.
High · vulnerability · github.com
WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)
While remote code execution depends on runtime prerequisites like PEAR, the unauthenticated LFI primitive resides directly in WordPress Core and affects all major branches from 4.7.0 through 7.1.1.
vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
Critical · vulnerability · github.com
CVE-2026-60004: Gitea diffpatch Git Hook Installation Remote Code Execution Exploit PoC
When self-registration is enabled, any unauthenticated attacker can create an account and immediately achieve host-level remote code execution on self-hosted Gitea instances.
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
back