CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...

cve-2025-32463-lab

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab This repository contains a Docker-based lab and proof-of-concept exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 to 1.9.17. 🚨 Disclaimer This code is for educational and authorized testing...

CVE-2025-32463

CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit Overview CVE-2025-32463 is a critical local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. This vulnerability allows attackers with sudo privileges to escalate to root access by exploiting a design flaw in the...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Author: 0xb0rn3 | 0xbv1 Type: Proof of Concept PoC Security Research Tool CVE: CVE-2023-42456 Technique: sudo -R chroot NSS library injection → privilege escalation to root ⚠️ Disclaimer This tool is developed for authorized penetration testing and...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Description This repository contains a Python-based Proof of Concept PoC for CVE-2025-32463, a local privilege escalation vulnerability in the sudo versions 1.9.14 through 1.9.17. When a user has sudo privileges to run a command within a chroot environment -R fla...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

Fedora 44 : firefox / nss (2026-42a3a95e62)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-42a3a95e62 advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...

Fedora 43 : firefox / nss (2026-208add2041)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-208add2041 advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...

Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen (critical)

openSUSE security update: security update for mozillafirefox, mozilla-nss, mozilla-nspr, rust-cbindgen ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21713-1 Rating: critical References: bsc1262698 bsc1262701 bsc1266262 bsc1266263 bsc1271649...

CVE-2026-82641 Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

CVE-2026-82641 Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

ROOT-OS-DEBIAN-12-CVE-2026-6772 CVE-2026-6772 in nss - Patched by Root

Root has patched CVE-2026-6772 in the nss package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-7531 CVE-2024-7531 in nss - Patched by Root

Root has patched CVE-2024-7531 in the nss package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-6767 CVE-2026-6767 in nss - Patched by Root

Root has patched CVE-2026-6767 in the nss package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-5388 CVE-2023-5388 in nss - Patched by Root

Root has patched CVE-2023-5388 in the nss package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-6766 CVE-2026-6766 in nss - Patched by Root

Root has patched CVE-2026-6766 in the nss package for Root:Debian:12. Multiple fixed versions available...

Oracle Linux 9 : firefox (ELSA-2026-58897)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58897 advisory. 140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

CVE-2026-78323

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

CVE-2026-78323 Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

CVE-2026-78323

CVE-2026-78323 affects JSS (Java Security Services) , specifically the JSSTrustManager class, which fails to verify NSS trust flags when validating CA certificates. As a result, certificates stored in the NSS database without TRUSTED_CA flags can be accepted as trust anchors for TLS connections. ...