Vendors confirm products affected by libssh bug as PoC code pops up on GitHub