CVE-2025-32463-POC

CVE-2025-32463 - sudo स्थानीय विशेषाधिकार वृद्धि PoC ⚠️ यह रिपॉजिटरी CVE-2025-32463 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC एक्सप्लॉइट शामिल करती है केवल शैक्षिक उद्देश्यों और अधिकृत वातावरण में उपयोग के लिए इरादा है। 🧠 भेद्यता के बारे में CVE-2025-32463 एक स्थानीय विशेषाधिकार वृद्धि भेद्यता है जो sudo...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit Versioni vulnerabili: da 1.9.14 a 1.9.17 root@kitploit: bash run.sh Esecuzione riuscita come di seguito: root@kitploit: neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + Script di riproduzione della vulnerabilità CVE-2025-32463 Sudo chroot Creazione della director...

CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – Laboratorio PoC Questo è un laboratorio containerizzato e una PoC per le seguenti vulnerabilità in sudo: CVE-2025-32462 – sudo -h: bypass della logica di corrispondenza host CVE-2025-32463 – sudo -R: escape della libreria NSS in chroot 🔒 Solo per scopi educativi...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Escalatione dei Privilegi in Sudo Una vulnerabilità di escalation dei privilegi esiste in sudo e interessa i sistemi basati su Linux/Unix. Il difetto deriva da una convalida impropria dei percorsi quando sudo viene utilizzato con l'opzione -R --chroot, consentendo agli attaccanti...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Escalata Locale dei Privilegi ExploitDB ID: 52352 🧠 Panoramica Generale Questo repository documenta una vulnerabilità critica di escalation locale dei privilegi LPE che interessa le versioni Sudo 1.9.14 – 1.9.17. La vulnerabilità deriva da un'implementazione errat...

CVE-2025-32463-EXPLOIT

Xpl0it — Hijack della libreria NSS di Sudo | v0.0.4 Autore: 0xb0rn3 | 0xbv1 Tipo: Strumento di Ricerca sulla Sicurezza Proof of Concept PoC CVE: CVE-2023-42456 Tecnica: Iniezione di libreria NSS tramite sudo -R chroot → escalazione dei privilegi a root ⚠️ Avvertenza Questo strumento è sviluppato...

CVE-2025-32463

CVE-2025-32463 – Sudo-Chroot-Privilegieneskalations-Exploit Überblick CVE-2025-32463 ist eine kritische lokale Privilegieneskalations-Schwachstelle in sudo-Versionen 1.9.14 bis 1.9.17. Diese Schwachstelle ermöglicht es Angreifern mit sudo-Berechtigungen, durch Ausnutzung eines Designfehlers in de...

[SECURITY] [DSA 6403-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq -...

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-12318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12318 Note that Nessu...

Updated nspr, nss and firefox(-l10n) packages fix security issues

The updated packages fix security vulnerabilities: Incorrect boundary conditions in the Audio/Video: Web Codecs component. CVE-2026-8946 Incorrect boundary conditions in the JavaScript Engine: JIT component. CVE-2026-8388 Use-after-free in the DOM: Bindings WebIDL component. CVE-2026-8947 Other...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

RockyLinux 9 : firefox (RLSA-2026:19201)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19201 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2026-1703)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1703 advisory. Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. CVE-2026-6766 Other...

AlmaLinux 10 : thunderbird (ALSA-2026:12285)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:12285 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2026:1650-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1650-1 advisory. This update for MozillaFirefox fixes the following issue: Update to Firefox Extended Support Release 140.10.0 ESR bsc1262230, MFSA 2026-32: -...

UBUNTU-CVE-2026-6766

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Linux Distros Unpatched Vulnerability : CVE-2026-6772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbir...

RHEL 7 : firefox (RHSA-2026:3984)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3984 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libvpx: Heap...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...