privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 和 1.7.x=1.7.2p4 本地权限提升 Sudo（su "do"）允许系统管理员授予某些用户（或用户组）以 root 身份运行部分（或全部）命令的能力，同时记录所有命令和参数。 漏洞环境 要为你的测试搭建一个漏洞环境，你需要安装 Docker，然后运行以下命令： root@kitploit: docker build -t privesc/cve-2010-0426 . docker run --rm -it privesc/cve-2010-0426 它将生成一个交互式 shell，并带有低权限用户身份。 漏洞代码 该漏洞存在于...

PT-2026-51638

Name of the Vulnerable Software and Affected Versions mise versions prior to 2026.6.1 Description The HTTP backend in mise improperly handles version strings for non-latest versions when creating install symlinks. Instead of using a sanitized version pathname, it uses the raw resolved version...

[SECURITY] Fedora 41 Update: rust-procs-0.14.10-2.fc41

A modern replacement for ps...

Sudo sudoers plugin design vulnerability

Sudo is a suite of programs developed by software developer Todd C. Miller for Unix-like operating systems that allow users to execute commands in a secure manner with special privileges. sudoers plugin is one of the Sudo configuration plugin. A design flaw exists in the SHA-2 digest support of t...

CVE-2015-8239

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed...