Openssh — PoC Archivehttps://poc.intelseclab.com/tags/openssh/Latest proof-of-concept entries.Hugoen-usSun, 12 Jul 2026 00:00:00 +0000OpenSSH Forwarded-Agent Lock/Unlock State Confusion → Unauthorized PKCS#11 Provider Load (No CVE)https://poc.intelseclab.com/pocs/network/2026-07-12_openssh-agent-lock-provider-bypass/Sun, 12 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-12_openssh-agent-lock-provider-bypass/High severity — network. Status: PoC — reproducible against a signed, checksum/signature-verified stock OpenSSH 10.4p1 build; no weaponized payload beyond starting an allowed PKCS#11 provider. Affects: OpenSSH portable — ssh, sshd, ssh-agent. Tags: openssh, ssh-agent, agent-forwarding, pkcs11, race-condition, state-confusion, no-cve, local-provider-abuse.networkHighopensshssh-agentagent-forwardingpkcs11race-conditionstate-confusionno-cvelocal-provider-abuseOpenSSH regreSSHion Signal-Handler Race Unauthenticated RCE (CVE-2024-6387)https://poc.intelseclab.com/pocs/network/2026-05-16_openssh-regresshion-signal-handler-race/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-16_openssh-regresshion-signal-handler-race/High severity (CVSS 8.1) — network · CVE-2024-6387. Status: Weaponized. Affects: OpenSSH server daemon (sshd) on glibc-based Linux. Tags: RCE, OpenSSH, sshd, glibc, race-condition, SIGALRM, unauthenticated.networkHighRCEOpenSSHsshdglibcrace-conditionSIGALRMunauthenticated