CVE-2025-32463

CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit Overview CVE-2025-32463 is a critical local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. This vulnerability allows attackers with sudo privileges to escalate to root access by exploiting a design flaw in the...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS 라이브러리 하이재킹 | v0.0.4 저자: 0xb0rn3 | 0xbv1 유형: PoCProof of Concept 보안 연구 도구 CVE: CVE-2023-42456 기법: sudo -R chroot NSS 라이브러리 주입 → 루트 권한 상승 ⚠️ 면책 조항 이 도구는 승인된 침투 테스트 및 교육 목적의 보안 연구 를 위해서만 개발되었습니다. 소유한 시스템 또는 명시적인 서면 허가를 받은 시스템에서만 실행하십시오. 저자는 어떠한 오용에 대해서도 책임을 지지 않습니다. 허가되지 않은 사용은...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 🧠 Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 – 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...

CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – PoC Lab This is a container-based lab and PoC for the following vulnerabilities in sudo: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape 🔒 For educational purposes only. Do not use on systems you don’t own or...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit Affected versions 1.9.14 to 1.9.17 bash run.sh Success as follows neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + CVE-2025-32463 Sudo chroot 漏洞复现脚本 正在创建临时工作目录... 工作目录已创建: /tmp/sudoexploit.nc0EjT 正在创建 C 语言 payload woot1337.c... 正在设置 chroot 环境和恶意的 nsswitch.conf...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo特権昇格 sudoにおける特権昇格の脆弱性が、Linux/Unix系システムに影響を与えます。この欠陥は、sudoが-R（--chroot）オプションと共に使用された際の不適切なパス検証 に起因し、攻撃者が悪意のあるNSSライブラリのロードを介してrootに昇格することを可能にします。 根本原因 sudoがchroot環境 （-Rオプション）内でコマンドを実行する際、エラー状態でのNSS Name Service Switch ライブラリの読み込み を誤って処理します。...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Astra Linux – Vulnerability in Firefox

Another issue in the Libraries component of NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

[SECURITY] [DSA 6403-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq -...

Debian dla-4694 : libnss3 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4694 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4694-1 [email protected]...

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-12318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12318 Note that Nessu...

Updated nspr, nss and firefox(-l10n) packages fix security issues

The updated packages fix security vulnerabilities: Incorrect boundary conditions in the Audio/Video: Web Codecs component. CVE-2026-8946 Incorrect boundary conditions in the JavaScript Engine: JIT component. CVE-2026-8388 Use-after-free in the DOM: Bindings WebIDL component. CVE-2026-8947 Other...

RockyLinux 9 : firefox (RLSA-2026:19201)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19201 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2026-1703)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1703 advisory. Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. CVE-2026-6766 Other...

AlmaLinux 10 : thunderbird (ALSA-2026:12285)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:12285 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2026:1650-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1650-1 advisory. This update for MozillaFirefox fixes the following issue: Update to Firefox Extended Support Release 140.10.0 ESR bsc1262230, MFSA 2026-32: -...

UBUNTU-CVE-2026-6766

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...