libssh-scanner

libssh 스캐너: CVE-2018-10933. SSH 배너를 기반으로 CVE-2018-10933에 취약한 서버를 스캔합니다. 이 스캐너는 Leap Security의 작업을 기반으로 합니다. 사용법 libssh-scan...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC 익스플로잇 로컬 권한 상승 LPE - openSUSE / SUSE Linux Enterprise 15 CVE-2025-6018 및 CVE-2025-6019에 대한 동작하는 PoC/익스플로잇 - openSUSE Leap 15.x 및 SUSE Linux Enterprise 15.x에서 비특권 사용자에서 root로의 권한 상승 🎯 빠른 요약 CVE ID| 취약점| 영향 ---|---|--- CVE-2025-6018| PAM 환경 변수 주입| allowactive polkit...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 익스플로잇 체인 이 익스플로잇은 openSUSE Leap 15.6을 대상으로 한 HackTheBox 챌린지를 해결하기 위해 개발되었습니다. 크레딧 이 익스플로잇은 Qualys 보안 팀의 원본 연구를 기반으로 합니다: 권고: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt CVE-2025-6018: openSUSE 15의 PAM에서 권한 없는 사용자에서 allowactive로의 LPE CVE-2025-6019:...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: ローカル権限昇格チェーン 対象OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x 必要なアクセス権: SSHアクセスが可能な非特権ローカルユーザー 結果: 完全なrootシェル 概要 このドキュメントでは、Qualys Threat Research Unitによって発見された2つの連鎖するローカル権限昇格の脆弱性を手動で悪用する方法について詳しく説明します。 CVE-2025-6018 —...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

취약점 데모 수행을 위한 지침 취약점용 ISO 링크 다음 링크에서 OS 이미지openSUSE-Leap-15.6를 다운로드하세요: https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso 이미지 크기는 약 4.4GB입니다. 그런 다음 이미지를 vagrantfile 폴더에 넣고 해당 파일ISOPATH을 편집하세요. 설치 종속성 virtualbox vagrant...

CVE-2025-6018_CVE-2025-6019_autopwn

체인 익스플로잇 CVE-2025-6018 및 CVE-2025-6019 Auto-Pwn 이 저장소는 주로 openSUSE Leap 15.x / SUSE 시스템에 영향을 미치는 두 가지 중요한 취약점을 대상으로 하는 완전한 익스플로잇 체인"Auto-Pwn"을 포함합니다: 1. CVE-2025-6018 : PAM 환경 주입. 사용자가 /.pamenvironment를 통해 민감한 변수예: XDGSEAT를 수정하여 systemd-logind를 속여 확장된 권한allowactive 상태을 부여하도록 합니다. 2. CVE-2025-6019...

CVE-2026-100230

A flaw was found in Input Leap. When the drag-and-drop file transfer feature is enabled, a connected peer can exploit improper path validation to perform directory traversal. By sending a specially crafted file transfer message, an attacker can write arbitrary files outside the intended destinati...

CVE-2026-100230

Input Leap aka input-leap through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message...

CVE-2026-100230

The software Input Leap (also known as input-leap ) versions through 3.0.3 is vulnerable to a directory traversal flaw on Windows and macOS platforms. When the non-default --enable-drag-drop option is active, the application mishandles the distinction between forward slashes (/) and backslashes (...

CVE-2026-100230

Input Leap aka input-leap through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message...

CVE-2026-100230

Input Leap aka input-leap through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message...

CVE-2026-100230

Input Leap aka input-leap through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message...

EUVD-2026-87130

Input Leap aka input-leap through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message...

CVE-2026-100230: Incorrect Behavior Order: Validate Before Canonicalize

Input Leap aka input-leap through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written to a startup directory. This occurs via a DDRG message...

Security update for osmo-iuh (important)

openSUSE security update: security update for osmo-iuh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21954-1 Rating: important References: bsc1281607 Cross-References: CVE-2026-75894 Affected Products: openSUSE Leap 16.0...

Security update for gimp (important)

openSUSE security update: security update for gimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21959-1 Rating: important References: bsc1276230 bsc1276231 bsc1276232 bsc1276233 bsc1276234 bsc1276235 bsc1276236 bsc1276237 bsc1280511 bsc1280512...

Security update for haveged (moderate)

openSUSE security update: security update for haveged ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21958-1 Rating: moderate References: bsc1264086 Cross-References: CVE-2026-41054 CVSS scores: CVE-2026-41054 SUSE : 7.8...

Security update for gitoxide (moderate)

openSUSE security update: security update for gitoxide ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21955-1 Rating: moderate References: bsc1281749 Cross-References: CVE-2026-91986 CVSS scores: CVE-2026-91986 SUSE : 5.4...

Security update for alloy (important)

openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21899-1 Rating: important References: bsc1263289 bsc1263324 bsc1264949 bsc1265542 bsc1265845 bsc1266654 Cross-References: CVE-2026-10722 CVE-2026-122...

Security update for distribution (important)

openSUSE security update: security update for distribution ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21898-1 Rating: important References: bsc1268884 bsc1276677 bsc1277966 bsc1278997 bsc1279219 bsc1279316 Cross-References: CVE-2026-37236...