CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING Il PoC è fornito esclusivamente per aiutare difensori, manutentori e team di sicurezza autorizzati a validare patch, mitigazioni, rilevamenti ed esposizione su sistemi di loro proprietà o su cui sono esplicitamente autorizzati a testare. Sei l'unico...

CVE-2025-32463-POC

CVE-2025-32463 - Escalação de Privilégio Local no sudo PoC ⚠️ Este repositório contém um exploit de Prova de Conceito PoC para o CVE-2025-32463 Destinado apenas a fins educacionais e ao uso em ambientes autorizados. 🧠 Sobre a Vulnerabilidade CVE-2025-32463 é uma vulnerabilidade de escalação de...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Escalata Locale dei Privilegi ExploitDB ID: 52352 🧠 Panoramica Generale Questo repository documenta una vulnerabilità critica di escalation locale dei privilegi LPE che interessa le versioni Sudo 1.9.14 – 1.9.17. La vulnerabilità deriva da un'implementazione errat...

CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – Laboratorio PoC Questo è un laboratorio containerizzato e una PoC per le seguenti vulnerabilità in sudo: CVE-2025-32462 – sudo -h: bypass della logica di corrispondenza host CVE-2025-32463 – sudo -R: escape della libreria NSS in chroot 🔒 Solo per scopi educativi...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit Versioni vulnerabili: da 1.9.14 a 1.9.17 bash run.sh Esecuzione riuscita come di seguito: neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + Script di riproduzione della vulnerabilità CVE-2025-32463 Sudo chroot Creazione della directory di lavoro temporanea...

CVE-2025-32463

CVE-2025-32463 - Exploit di escalation dei privilegi chroot di sudo Panoramica CVE-2025-32463 è una vulnerabilità critica di escalation locale dei privilegi nelle versioni di sudo dalla 1.9.14 alla 1.9.17. Questa vulnerabilità consente agli attaccanti con privilegi sudo di ottenere accesso root...

CVE-2025-32463-EXPLOIT

Xpl0it — Hijack della libreria NSS di Sudo | v0.0.4 Autore: 0xb0rn3 | 0xbv1 Tipo: Strumento di Ricerca sulla Sicurezza Proof of Concept PoC CVE: CVE-2023-42456 Tecnica: Iniezione di libreria NSS tramite sudo -R chroot → escalazione dei privilegi a root ⚠️ Avvertenza Questo strumento è sviluppato...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo特権昇格 sudoにおける特権昇格の脆弱性が、Linux/Unix系システムに影響を与えます。この欠陥は、sudoが-R（--chroot）オプションと共に使用された際の不適切なパス検証 に起因し、攻撃者が悪意のあるNSSライブラリのロードを介してrootに昇格することを可能にします。 根本原因 sudoがchroot環境 （-Rオプション）内でコマンドを実行する際、エラー状態でのNSS Name Service Switch ライブラリの読み込み を誤って処理します。...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Astra Linux – Vulnerability in Firefox

Another issue in the Libraries component of NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

[SECURITY] [DSA 6403-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq -...

Debian dla-4694 : libnss3 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4694 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4694-1 [email protected]...

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-12318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12318 Note that Nessu...

Updated nspr, nss and firefox(-l10n) packages fix security issues

The updated packages fix security vulnerabilities: Incorrect boundary conditions in the Audio/Video: Web Codecs component. CVE-2026-8946 Incorrect boundary conditions in the JavaScript Engine: JIT component. CVE-2026-8388 Use-after-free in the DOM: Bindings WebIDL component. CVE-2026-8947 Other...

RockyLinux 9 : firefox (RLSA-2026:19201)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19201 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2026-1703)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1703 advisory. Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. CVE-2026-6766 Other...

AlmaLinux 10 : thunderbird (ALSA-2026:12285)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:12285 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2026:1650-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1650-1 advisory. This update for MozillaFirefox fixes the following issue: Update to Firefox Extended Support Release 140.10.0 ESR bsc1262230, MFSA 2026-32: -...

UBUNTU-CVE-2026-6766

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...