SUSE-SU-2025:20513-1 Security update for pam-config

This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226...

RLSA-2025:10027 Important: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Linux-pam directory Traversal CVE-2025-6020 For more details about the security issues, including the impact, a CVSS...

pam security update

An update is available for pam. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Pluggable Authentication Modules PAM provide a system to set up authentication...

Security update for pam-config

This update for pam-config fixes the following issues: CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2025:20533-1 Security update for pam-config

This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226...

Linux PAM Environment - Variable Injection Local Privilege Escalation

Exploit Title: Linux PAM Environment - Variable Injection Local Privilege Escalation Exploit Author: @İbrahimsql Exploit Author's github: https://github.com/ibrahmsql Description: PAM pamenv.so module allows environment variable injection via /.pamenvironment leading to privilege escalation throu...

CVE-2025-5254

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7...

CVE-2025-5253

Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7...

CVE-2025-5254

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7...

CVE-2025-5253

Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7...

CVE-2025-5254 Stored XSS in Kron Technologies' Kron PAM

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7...

CVE-2025-5254

CVE-2025-5254 describes a Stored XSS flaw in Kron Technologies’ Kron PAM (pre-3.7) caused by improper neutralization of input during web page generation. Affected: Kron PAM versions before 3.7. Impact: potential execution of malicious scripts in a user’s browser when data is stored and later rend...

CVE-2025-5254 Stored XSS in Kron Technologies' Kron PAM

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7...

CVE-2025-5254

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7...

CVE-2025-5253 DoS in Kron Technologies' Kron PAM

Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7...

CVE-2025-5253

Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7...

CVE-2025-5253

CVE-2025-5253 affects Kron Technologies’ Kron PAM prior to version 3.7. The issue is described as an HTTP DoS caused by unrestricted resource allocation (or throttling), enabling resource exhaustion under HTTP requests. Affected component is Kron PAM’s HTTP handling; product/version details indic...

CVE-2025-5253 DoS in Kron Technologies' Kron PAM

Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7...

Kron PAM 跨站脚本漏洞

Kron PAM is a privileged access management platform from Kron Turkey. A cross-site scripting vulnerability exists in Kron PAM that stems from improper input neutralization and could lead to stored cross-site scripting...

PT-2025-30744

Name of the Vulnerable Software and Affected Versions Kron PAM versions prior to 3.7 Description Kron PAM is susceptible to a Stored Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts. Recommendatio...