Jakub Witczak

TFTP Path Traversal

SFTP root escape via component-agnostic prefix check in ssh_sftpd

SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

Pre-auth SSH DoS via unbounded zlib inflate

OCSP designated-responder authorization bypass via missing signature verification

SSH SFTP server denial of service via extended channel data infinite loop

OCSP responder certificate validity period not checked in public_key

SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT

TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

Malicious Key Exchange Messages may Lead to Excessive Resource Consumption