CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio Avanzado de PoC Este repositorio proporciona un laboratorio basado en contenedores y un PoC detallado para dos vulnerabilidades críticas de sudo: CVE-2025-32462 – Omisión de la lógica de coincidencia de host de sudo -h CVE-2025-32463 – Escape de la...

EulerOS Virtualization 2.10.1 : cifs-utils (EulerOS-SA-2026-3829)

According to the versions of the cifs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looki...

EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2026-3863)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking u...

CVE-2025-32463

CVE-2025-32463 Es una vulnerabilidad de escalada de privilegios local que afecta a versiones vulnerables de sudo. La falla abusa de la función sudo -R chroot junto con el mecanismo de Linux Name Service Switch NSS para forzar a sudo a cargar una biblioteca compartida controlada por el atacante co...

OESA-2026-3997 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3998 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3995 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3996 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

cve-2025-32463-lab

CVE-2025-32463 – Laboratorio de escalada de privilegios local con sudo chroot Este repositorio contiene un laboratorio basado en Docker y un exploit de prueba de concepto para CVE-2025-32463, una vulnerabilidad de escalada de privilegios local en sudo versiones 1.9.14 a 1.9.17. 🚨 Aviso legal Este...

CVE-2025-32463

CVE-2025-32463 - Exploit de Escalada de Privilegios en Sudo Chroot Descripción General CVE-2025-32463 es una vulnerabilidad crítica de escalada local de privilegios en las versiones de sudo 1.9.14 a 1.9.17. Esta vulnerabilidad permite a los atacantes con privilegios de sudo escalar al acceso root...

CVE-2025-32463-EXPLOIT

Xpl0it — Secuestro de la biblioteca NSS de Sudo | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Tipo: Prueba de concepto PoC Herramienta de investigación de seguridad CVE: CVE-2023-42456 Técnica: Inyección de biblioteca NSS en chroot de sudo -R → escalada de privilegios a root ⚠️ Aviso de responsabilidad Esta...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Descripción Este repositorio contiene una Prueba de Concepto PoC basada en Python para CVE-2025-32463, una vulnerabilidad de escalada de privilegios local en las versiones de sudo 1.9.14 a 1.9.17. Cuando un usuario tiene privilegios de sudo para ejecutar un coman...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Escalada de privilegios en Sudo Existe una vulnerabilidad de escalada de privilegios en sudo que afecta a sistemas basados en Linux/Unix. El fallo surge debido a una validación incorrecta de rutas cuando sudo se utiliza con la opción -R --chroot, lo que permite a los atacantes...

[SECURITY] Fedora 43 Update: nss-3.129.0-1.fc43

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

EulerOS Virtualization 2.11.0 : nss (EulerOS-SA-2026-3532)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash...

EulerOS 2.0 SP10 : cifs-utils (EulerOS-SA-2026-3685)

According to the versions of the cifs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user...

Fedora 43 : firefox / nss (2026-d7ba4af112)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-d7ba4af112 advisory. NSS Release Notes Update NSS to 3.129.0 - Bug 2017322 - set CKANSSSERVERDISTRUSTAFTER for CN=Izenpe.com. - Bug 2025246 - fix unknown key error type ...

EulerOS Virtualization 2.12.1 : cifs-utils (EulerOS-SA-2026-3579)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before lookin...

EulerOS Virtualization 2.12.0 : cifs-utils (EulerOS-SA-2026-3633)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before lookin...

Linux Distros Unpatched Vulnerability : CVE-2026-90372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: avoid nss underflow in mt7915mcugetstanss If a peer's VHT/HE MCS map has no supported spatial stream all fields 0x3, the loop exits with nss...