OpenSSH ProxyCommand 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/AboSteam/POPC/blob/main/OpenSSH%20ProxyCommand%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20(CVE-2023-51385).md
• https://bbs.huaweicloud.com/blogs/420078
• https://juejin.cn/post/7618896648212168744
• https://nic.yangtzeu.edu.cn/info/1012/1195.htm
• https://blog.csdn.net/mirocky/article/details/135485164
• http://www.gzwangan.com/?p=3671
• https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-51385
• https://github.com/WLaoDuo/CVE-2023-51385_poc-test
• https://lb5.net/135.html
• https://www.ucloud.cn/site/ucsafe/6599.html
• https://qkl.seebug.org/vuldb/ssvid-99795
• https://buaq.net/go-209909.html
• https://avd.aliyun.com/detail?id=AVD-2023-51385
• https://www.huntress.com/threat-library/vulnerabilities/cve-2023-51385
• https://www.sonicwall.com/blog/ssh-proxycommand-command-injection
• https://nvd.nist.gov/vuln/detail/CVE-2025-61984
• https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984

Related Vulnerabilities

• PoCCVE-2023-48795: OpenSSH Terrapin Attack - Detection
• PoCeol-openssh-debian: EOL Debian OpenSSH - Detect
• Microsoft Windows OpenSSH 访问控制不当漏洞 可导致远程代码执行
• Microsoft Windows OpenSSH 访问控制不当漏洞
• OpenSSH CVE-2024-6387 远程代码执行漏洞
• OpenSSH 条件竞争漏洞
• OpenSSH 远程代码执行漏洞
• OpenSSH CVE-2023-48795 Terrapin攻击漏洞
• OpenSSH CVE-2023-48795 Terrapin 攻击漏洞
• OpenSSH ProxyCommand命令注入漏洞
• OpenSSH 远程命令执行漏洞
• OpenSSH 命令注入漏洞(CVE-2023-51385)
• OpenSSH-用户枚举漏洞(CVE-2018-15473)