saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC

PoC

This repository contains a proof-of-concept (PoC) for exploiting the OpenSSH ProxyCommand vulnerability — CVE-2025-51385 — affecting OpenSSH servers <9.6 Version

view exploit source poc_in_githubauthor saarcastifiedpublished 2025-07-22catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-51385US	—	0.41% (35th)	Exploit	2025-07-31
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the id parameter.
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	2023-12-18
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain si…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan