CVE-2025-32463-PoC

CVE-2025-32463 – Sudo chroot를 통한 권한 상승 📝 개요 CVE-2025-32463 은 sudo 유틸리티에 영향을 미치는 로컬 권한 상승 취약점입니다. 일반 사용자가 사용자 지정 런타임 루트 디렉터리를 설정하는 -R 옵션과 조작된 NSS 구성을 함께 악용하여 루트 권한으로 권한을 상승시킬 수 있습니다. CVE: CVE-2025-32463 구성 요소: sudo 영향: 로컬 권한 상승root 발견자: Rich Mirch 🚨 위험 및 영향 성공적으로 악용될 경우 낮은 권한의 로컬 사용자에게 전체 루트 액세스 권...

CVE-2025-32463

Framework de détection CVE-2025-32463 Un framework complet de surveillance et de détection de sécurité conçu pour identifier les tentatives d'exploitation de la vulnérabilité d'escalade de privilèges sudo chroot CVE-2025-32463. Ce projet illustre des méthodologies avancées de détection des menace...

MagiskEoP

Introduction Ceci est un exploit pour une vulnérabilité CVE-2024-48336 dans l'application Magisk qui permet à une application locale d'obtenir silencieusement un accès root sans consentement utilisateur. La vulnérabilité a été initialement signalée par @vvb2060 et démontrée PoC par @canyie. Elle ...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1760018787)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760018787 advisory. - cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Escalade de privilèges à l'aide de l'exploit Dirty Cow du noyau Ce projet a pour but de démontrer de manière pratique le fonctionnement de l'exploit Dirty COW CVE-2016-5195, une vulnérabilité critique du noyau Linux. On simule un scénario réaliste dans lequel un attaquant disposant d'un accès loc...

CVE-2015-1328

CVE-2015-1328 Preuve de Concept Une preuve de concept PoC pour CVE-2015-1328, une vulnérabilité d'escalade de privilèges affectant l'implémentation overlayfs du noyau Linux. Cette vulnérabilité permet à des utilisateurs locaux non privilégiés d'obtenir un accès root en exploitant des vérification...

CVE-2021-3560

Уязвимость Polkit - CVE-2021-3560 📕 Введение В 2021 году исследователь Кевин Бэкхаус обнаружил уязвимость повышения привилегий в утилите polkit. однако не все версии Linux уязвимы для polkit. Ниже приведен пример уязвимой версии; Red Hat Enterprise Linux 8 Fedora 21 или новее Debian Testing...

EUVD-2026-75594

A Time-of-check Time-of-use TOCTOU race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file/directory ownership takeover...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093145 advisory. A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise Hi...

EUVD-2026-54262

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for POCO M6 Pro emerald GhostLock CVE-2026-43499...

CVE-2026-12504 Loytec LINX firmware: Improper Authentication in PAM configuration

Improper Authentication CWE-287 in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root shell via an /etc/passwd entry with an emp...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2724)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871...

EulerOS Virtualization 2.10.0 : dnsmasq (EulerOS-SA-2026-2848)

According to the versions of the dnsmasq package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary...

EulerOS Virtualization 2.12.0 : util-linux (EulerOS-SA-2026-2810)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerabilit...

CVE-2026-47134 ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. The ECDSA private key used to sign the on-disk policy database /Library/Application Support/clearancekit/store.db is stored in the macOS System Keychain. The key was created via the two-step patte...

EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2026-2645)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root...

TencentOS Server 4: cifs-utils (TSSA-2026:0552)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0552 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Amazon Linux 2 : dnsmasq, --advisory ALAS2-2026-3318 (ALAS-2026-3318)

The version of dnsmasq installed on the remote host is prior to 2.76-16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3318 advisory. A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute...

Important: dnsmasq

Issue Overview: A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. CVE-2026-4892 An information disclosure vulnerability in dnsmasq allows remote attackers to...