CVE-2025-32462-POC

CVE-2025-32462 – sudo -h Privilege Escalation PoC 🚨 Local privilege escalation exploit for sudo via the -h/--host argument Affects systems with sudo misconfigurations allowing unintended root access. 🧠 About This PoC demonstrates CVE-2025-32462 , a logic flaw in sudo all versions ≤ 1.9.17, where...

poc-cve-2019-14287

PoC of CVE-2019-14287 ملخص هذا مثال لإعادة إنتاج ثغرة sudo CVE-2019-14287 داخل حاوية Docker. خطوات التمرين 1. قم بتشغيل الحاوية باستخدام docker compose up -d 2. ادخل إلى الحاوية باستخدام docker exec -it vulnerablesudoapp bash 3. قم بتشغيل whoami أو id لتأكيد أنك مستخدم عادي ليس root $ whoami user...

FreeBSD : sudo -- Potential bypass of Runas user restrictions (3a1474ba-f646-11e9-b0af-b888e347c638)

Todd C. Miller reports : When sudo is configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, it is possible to run commands as root by specifying the user ID -1 or 4294967295. This can be used by a user with sufficient sudo privileges to run...