Feed/CVE-2023-51385
CVE-2023-51385MEDIUMCVSS 6.5

CVE-2023-51385

Published Jun 26, 2026·Updated Oct 15, 2026

NVD Description

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.

Public Exploits & PoCs16 found

[POC] CVE-2023-51385 — poc-proxycommand-vulnerable

Proof of conept to exploit vulnerable proxycommand configurations on ssh clients (CVE-2023-51385)

33

[POC] CVE-2023-51385 — CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC

This repository contains a proof-of-concept (PoC) for exploiting the OpenSSH ProxyCommand vulnerability — CVE-2025-51385 — affecting OpenSSH servers <9.6 Version

[POC] CVE-2023-51385 — CVE-2023-51385-

CVE-2023-51385

[POC] CVE-2023-51385 — CVE-2023-51385

CVE-2023-51385 的exp

[POC] CVE-2023-51385 — CVE-2023-51385-save

CVE-2023-51385-save

[POC] CVE-2023-51385 — CVE-2023-51385

CVE-2023-51385

[POC] CVE-2023-51385 — CVE-2023-51385

CVE-2023-51385 PoC Exploit

[POC] CVE-2023-51385 — cve-2023-51385

春秋云镜

[POC] CVE-2023-51385 — CVE-2023-51385_TT

CVE-2023-51385测试POC

[POC] CVE-2023-51385 — CVE-2023-51385_test-star-main

CVE-2023-51385_test-star-main

PoC: CVE-2023-51385_test

一个验证对CVE-2023-51385

PoC: CVE-2023-51385_poc-test

CVE-2023-51385;OpenSSH ProxyCommand RCE;OpenSSH <9.6 命令注入漏洞poc

PoC: CVE-2023-51385_test

一个验证对CVE-2023-51385

PoC: CVE-2023-51385

OpenSSH ProxyCommand RCE

PoC: CVE-2023-51385

OpenSSH ProxyCommand RCE

PoC: CVE-2023-51385_test

This is a test

Community Discussion

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free