Exploring vulnerable SSH configurations safely inside a local pentest environment

In the last article, we examined how nginx modules, a tool designed to serve web traffic, can be exploited by an attacker who has gained a…

Introduction

Difficulty: Easy

How to Navigate Home Directories, Read Hidden Files, and Manage Credentials Like a Linux Pro.

  TL;DR A serious libssh2 vulnerability now puts SSH clients at risk. Researchers track it as CVE-2026-55200, with a CVSS 4.0 score of 9.2. A remote attacker can corrupt memory and run code o…

TL;DR Researchers publicly disclosed a libssh2 vulnerability tracked as CVE-2026-58050. The flaw lets a malicious SSH server corrupt the heap of a connecting client. Proof-of-concept exploit code …

A public proof-of-concept (PoC) exploit has been released for CVE-2026–55200, a critical vulnerability in the widely used libssh2 library…

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side use-after-free, CVE-2026-60002, scored 7.7. Most other issues involve file transfers and server har…

Introduction