CVE-2025-46811

SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Scanner & Exploiter 🚀 Features Multi-threaded vulnerability scanning Interactive root shell via WebSocket Single command execution mode Colored debug output Batch processing of targets 📦 Installation git clone...

PT-2026-61592

New CVE-2026-63007 in https://t.co/q07sKeom2Z / SUSE Manager. Two formula XML-RPC methods skipped the org permission check every sibling enforces. A low-priv user in one org could read another org's Salt pillar secrets and push tampered config to its minions. cve research https://t.co/nLYkERfxK9...

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.19 Bugs mentioned: bsc1269253, bsc1269534 Security update 4.3.19 for Multi-Linux Manager Server LTS Description: This update fixes the following issues: release-notes-susemanager: Upda...

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.18 Bugs mentioned bsc1249675, bsc1259554 Security update 4.3.18 for Multi-Linux Manager Server LTS Description: This update fixes the following issues: release-notes-susemanager: Updat...

SUSE Manager / Uyuni WebSocket unauthenticated remote command (CVE-2025-46811)

Unauthenticated access to /rhn/websocket/minion/remote-commands allows listing registered Salt minions preview and scheduling arbitrary shell commands on a chosen minion. Affects Uyuni 2025.05, SUSE Manager 5.0.4, SUSE Manager 4.3.15 and related releases as described in the advisory. !/usr/bin/en...

SUSE Manager / Uyuni CVE-2025-46811 WebSocket detection

Detects unauthenticated exposure of /rhn/websocket/minion/remote-commands by requesting a preview of Salt minions CVE-2025-46811. Affected stacks include Uyuni 2025.05, SUSE Manager 5.0.4, SUSE Manager 4.3.15 per public advisories. !/usr/bin/env python3 -- coding: utf-8 -- import json import...

SUSE Manager 4.3.15 - Code Execution

Exploit Title: SUSE Manager 4.3.15 - Code Execution Date: 29.01.2026 Exploit Author: Wiktor Maj Vendor Homepage: https://www.uyuni-project.org/ Software Link: https://github.com/uyuni-project/uyuni Version: Uyuni 2025.05, SUSE Manager 5.0.4, SUSE Manager 4.3.15 Tested on: Debian 12 bookworm, Pyth...

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.17 CVEs Fixed: CVE-2024-29371, CVE-2026-27727, CVE-2026-27830 Bugs mentioned: bsc1227577, bsc1227579, bsc1236799, bsc1243241, bsc1244724 bsc1248741, bsc1251995, bsc1253068, bsc1253773...

SUSE SLES15 : Security update 4.3.16.2 for Multi-Linux Manager Server LTS (SUSE-SU-2025:4479-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4479-1 advisory. release-notes-susemanager: - Update to SUSE Manager 4.3.16.2 SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled CVEs Fixed:...

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.16.2 Security update 4.3.16.2 for Multi-Linux Manager Server LTS Description: This update fixes the following issues: release-notes-susemanager: Update to SUSE Manager 4.3.16.2 SUSE...

CVE-2025-53883

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x8664/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manag...

CVE-2025-53883

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x8664/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manag...

CVE-2025-53883

CVE-2025-53883 - Summary (concrete details from connected docs): A reflected XSS vulnerability arises from improper neutralization of script-related HTML tags in a web page’s search fields, enabling arbitrary JavaScript execution. Affected products and versions from the sources include: SUSE Mana...

CVE-2025-53883 spacewalk-java has various XSS issues on search page

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x8664/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manag...

SUSE多款产品 安全漏洞

SUSE Manager and SUSE Manager Server are both products of SUSE Germany.SUSE Manager is a Linux server management system. The system provides automated software management, system configuration, and monitoring.SUSE Manager Server is an infrastructure management solution designed to simplify and...

PT-2025-44398

Name of the Vulnerable Software and Affected Versions Container suse/manager versions prior to 5.0.28-150600.3.36.8 SUSE Manager Server LTS 4.3 versions prior to 4.3.88-150400.3.113.5 Description An Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS issue exists, allowing...

SUSE多款产品 安全漏洞

SUSE Manager and SUSE Manager Server are both products of SUSE Germany.SUSE Manager is a Linux server management system. The system provides automated software management, system configuration, and monitoring.SUSE Manager Server is an infrastructure management solution designed to simplify and...

CVE-2025-53883: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x8664/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manag...

SUSE CVE-2025-53883

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x8664/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manag...

SUSE SLES15 : Security update 4.3.16.1 for SUSE Manager Proxy and Retail Branch Release Notes (SUSE-SU-2025:3827-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3827-1 advisory. release-notes-susemanager-proxy: - Update to SUSE Manager 4.3.16.1 CVEs Fixed: CVE-2025-53883 Bugs mentioned: bsc1246277, bsc1227577 Tenable ha...