uraid
Attackers are starting to target .NET developers with malicious NuGet packages
Examining OpenSSH Sandboxing and Privilege Separation – Attack Surface Analysis
Re:OpenSSH Pre-Auth Double Free – CVE-2023-25136 – Writeup and Proof-o...
on Wednesday February 08, 2023 @02:34PM (#34713608)
This is exploitable in the latest Archlinux 2023.02.01.
Also, this doesn't require enabling old key exchange algorithms.