89 matches found
CVE-2025-32463_illdeed
CVE-2025-32463 — sudo -R 권한 상승 익스플로잇illdeed 변형 이것은 CVE-2025-32463에 대한 리팩터링된 개념 증명PoC 익스플로잇입니다. sudo 1.9.14부터 1.9.17까지의 심각한 취약점으로, sudo -R 및 가짜 NSS 모듈을 통해 로컬에서 루트로 권한 상승 을 허용합니다. ⚠️ 이 버전은 추적 및 포렌식 테스트를 위해 illdeed라는 페이로드를 생성합니다. 💥 작동 방식 사용자 정의 nsswitch.conf가 포함된 가짜 chroot 디렉터리를 생성합니다. 악성...
cve-2025-32463-lab
CVE-2025-32463 – Sudo chroot 로컬 권한 상승 실습 환경 이 저장소는 CVE-2025-32463 sudo 1.9.14 1.9.17 버전의 로컬 권한 상승 취약점을 위한 Docker 기반 실습 환경과 개념 증명 익스플로잇을 포함합니다. 🚨 면책 조항 이 코드는 교육 및 승인된 테스트 목적으로만 사용됩니다. 소유권이 없거나 명시적 허가를 받지 않은 시스템에서는 사용하지 마십시오. 실습 환경 특징 취약한 Ubuntu 24.04 컨테이너 sudo 1.9.15p5 일반 사용자 labuser 익스플로잇 스크립트:...
CVE-2025-32463_Sudo_PoC
CVE-2025-32463SudoPoC PoC para CVE-2025-32463: escalada local de privilegios en sudo mediante --chroot. Explota la inyección de módulos NSS a través de entornos chroot diseñados. Pensado para investigadores de seguridad y entornos exclusivamente de laboratorio. CVE-2025-32463 - Escalada local de...
CVE-2025-32463-Sudo-Chroot-Escape
CVE-2025-32463-Sudo-Chroot-Escape 설명 이 저장소는 sudo 1.9.141.9.17 버전의 로컬 권한 상승 취약점인 CVE-2025-32463에 대한 Python 기반 PoCProof of Concept를 포함합니다. 사용자가 chroot 환경에서 명령을 실행할 수 있는 sudo 권한-R 플래그을 가진 경우, 공격자는 Name Service SwitchNSS 메커니즘을 악용하여 악성 공유 객체를 로드할 수 있습니다. 이를 통해 공격자는 chroot를 탈출하고 루트 사용자로 임의 코드를 실행할 수...
OESA-2026-3028 cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled...
OESA-2026-3032 cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled...
Amazon Linux 2023 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2023-2026-1927)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1927 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...
cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
DEBIAN-CVE-2026-12505
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
CVE-2026-12505
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
CVE-2026-12505
CVE-2026-12505 concerns the cifs-utils package. The issue: the root-owned cifs.upcall fails to securely drop root privileges before consulting user information, allowing a local, low-privilege attacker to craft a request_key payload that causes the process to enter a controlled environment with a...
CVE-2026-35368
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...
CVE-2026-35368
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...
CVE-2026-34397
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...
EUVD-2026-17983
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...
PT-2026-29576
Name of the Vulnerable Software and Affected Versions Himmelblau versions 2.0.0-alpha through 2.3.8 and 3.0.0-alpha through 3.1.0 Description Himmelblau, an interoperability suite for Microsoft Azure Entra ID and Intune, contains a conditional local privilege escalation issue due to an edge-case...
EUVD-2015-7431
Malware in sbrugna...
EUVD-2010-0852
Malware in sbrugna...