CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – PoC 实验室 这是一个基于容器的实验室和 PoC，针对 sudo 中的以下漏洞： CVE-2025-32462 – sudo -h 主机匹配逻辑绕过 CVE-2025-32463 – sudo -R chroot NSS 库逃逸 🔒 仅供教育用途。请勿在您不拥有或无权限测试的系统上使用。 🔬 原始研究 CVE-2025-32462 相关博文：sudo 主机别名权限提升 CVE-2025-32463 相关博文：sudo chroot NSS 绕过 🧠 研究致谢 Rich Mirch Stratascale Cyber...

Arbitrary Argument Injection

Overview @aiondadotcom/mcp-ssh is a MCP Agent for managing SSH hosts - A Model Context Protocol server for SSH operations Affected versions of this package are vulnerable to Arbitrary Argument Injection via improper handling of the hostAlias, command, localPath, or remotePath arguments. An attack...

SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

Impact A crafted hostAlias argument such as -oProxyCommand=... was passed to ssh/scp without an argument terminator. SSH interprets arguments starting with - as options regardless of position, so the option-injection caused SSH to execute the attacker-supplied ProxyCommand locally on the machine...

openSUSE Security Update : lynis (openSUSE-2017-705)

This update for lynis fixes the following issues : Lynis 2.5.1 : - Improved detection of SSL certificate files - Minor changes to improve logging and results - Firewall tests: Determine if CSF is in testing mode The Update also includes changes from Lynis 2.5.0 : - CVE-2017-8108: symlink attack m...