CVE-2025-6019

CVE-2025-6019 إثبات المفهوم PoC يحتوي هذا المستودع على سكربت إثبات المفهوم PoC لثغرة CVE-2025-6019 ، وهي ثغرة تصعيد امتيازات محلياً LPE في libblockdev وudisks. ينشئ السكربت صورة نظام ملفات XFS تحتوي على ثنائي bash بصلاحيات SUID ويستغل الثغرة لتركيبها بدون خيار nosuid، مما يسمح بالحصول على شل...

CVE-2025-6018-and-CVE-2025-6019

जांचें कि यह असुरक्षित है या नहीं root@kitploit: rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 यदि संस्करण शामिल है: असुरक्षित PAM संस्करण...

opensuse-leap-privesc-exploit

سلسلة استغلال CVE-2025-6018 + CVE-2025-6019 تم تطوير هذا الاستغلال لحل تحدي من HackTheBox يستهدف openSUSE Leap 15.6. الاعتمادات يعتمد هذا الاستغلال على البحث الأصلي لفريق أمان Qualys: النشرة الأمنية: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt CVE-2025-6018: ترقية الصلاحيات من...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: سلسلة تصعيد الامتيازات المحلية نظام التشغيل المستهدف: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x الوصول المطلوب: مستخدم محلي غير مميز مع وصول SSH النتيجة: شل جذر كامل نظرة عامة توثق هذه الوثيقة الاستغلال اليدوي لثغرتين محليتين متسلسلتين لتصعيد الامتيازات...

CVE-2025-6019

CVE-2025-6019: ثغرة رفع الامتيازات المحلية في libblockdev ملخص CVE-2025-6019 هي ثغرة رفع امتيازات محلية LPE اكتُشفت في مكتبة libblockdev، وتعمل بالتنسيق مع البرنامج الخفي udisks2 وPolkit. وصف الثغرة يمكن لمهاجم محلي يمتلك إذن allowactive في Polkit عادةً مستخدم يتعامل فعليًا مع الكمبيوتر استغلال...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt यह एक्सप्लॉइट CVE-2025-6018 और CVE-2025-6019 को जोड़कर, कमजोर SUSE/openSUSE सिस्टम पर एक अविशेषाधिकार प्राप्त उपयोगकर्ता से रूट तक स्थानीय विशेषाधिकार वृद्धि प्राप्त करता है। CVE-2025-6018, pamenv.so संस्करण 1.3.0-1.6.0 में एक PAM प्लगे...

CVE-2025-6018-6019-PoC

CVE-2025-6018 وCVE-2025-6019: إثبات مفهوم PoC لتصعيد الامتيازات محليًا إثبات مفهوم قوي PoC لربط CVE-2025-6018 تجاوز الجلسة النشطة في PAM/Polkit وCVE-2025-6019 ثغرة تركيب SUID في libblockdev لتحقيق وصول الجذر على أنظمة Linux المتأثرة. إخلاء مسؤولية هذه الأداة لأغراض تعليمية وأبحاث أمنية مصرّح بها...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 & CVE-2025-6019 PoC A Proof of Concept for chai...

MiracleLinux 7 : libblockdev-2.18-5.0.1.el7.AXS7 (AXSA:2025-10699:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10699:04 advisory. CVE-2025-6019: don't allow suid and dev set on fs resize CVEs: CVE-2025-6019 A Local Privilege Escalation LPE vulnerability was found in libblockdev...

MiracleLinux 8 : libblockdev-2.28-7.el8_10 (AXSA:2025-10409:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10409:02 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : libblockdev-2.28-14.el9_6 (AXSA:2025-10552:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10552:03 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...

Advisory ROSA-SA-2025-3084

Software: libblockdev 2.18 OS: rosa-server79 unaffected versions = libblockdev-2.18-5.0.1.res7 affected versions libblockdev-2.18-5.0.1.1.res7 CVE-ID: CVE-2025-6019 BDU-ID: 2025-07084 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libblockdev library is related to the ability to mount the file...

CLSA-2025-1764325063 libblockdev: Fix of CVE-2025-6019

CVE-2025-6019: don't allow suid and dev set on fs resize...

TencentOS Server 4: udisks2 (TSSA-2025:0480)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0480 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: libblockdev (TSSA-2025:0478)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0478 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 2: libblockdev (TSSA-2025:0535)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0535 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : udisks2 (EulerOS-SA-2025-2312)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2312)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libblockdev (EulerOS-SA-2025-2266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2280)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...