41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0876c-52e8-71e1-a1a3-e79e0d40d8f1

Bash a newline: Exploiting SSH via ProxyCommand, again (CVE-2025-61984)

David Leadbeater · published 7 October 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dgl.cx Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 2,312

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

SSH ProxyCommand == unexpected code execution (CVE-2023-51385) Read at the source ↗

vin01.github.io

https://man.openbsd.org/ssh_config

man.openbsd.org

https://github.com/vin01/poc-proxycommand-vulnerable

github.com

https://www.compart.com/en/unicode/U+02C8

compart.com

https://en.wikipedia.org/wiki/Trust_on_first_use

en.wikipedia.org

https://yc.prosetech.com/3-terrible-programming-features-from-the-past-ee5260af1d74

yc.prosetech.com

https://github.com/dgl/cve-2025-61984-poc

github.com

https://github.com/dgl/cve-2025-61984-poc/tree/fish

github.com

https://github.com/search?q=%2FProxyCommand.*%25r%2F&type=code

github.com

https://github.com/gravitational/teleport

github.com

https://github.com/gravitational/teleport/blob/3ad5b061554d968982548ec83d75aca4208d4865/lib/config/openssh/openssh.go

github.com

https://www.openssh.com/releasenotes.html

openssh.com

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Read at the source ↗

https://www.rfc-editor.org/rfc/rfc9413.html

rfc-editor.org

Parse, don’t validate Read at the source ↗

lexi-lambda.github.io

https://vin01.github.io/piptagole/

vin01.github.io

https://www.gresearch.com/teams/open-source-software/

gresearch.com