CVE-2026-7867-disk2root

Filesystem.Mount → as-user Spoofing → Authorization Bypass → Root-context Mount → LPE Panoramica CVE-2026-7867 è una vulnerabilità di escalation dei privilegi locali in udisks2 che coinvolge il metodo D-Bus Filesystem.Mount, l'opzione as-user, i flussi di...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Este exploit combina CVE-2025-6018 e CVE-2025-6019 para obter escalada de privilégios local de um usuário não privilegiado para root em sistemas vulneráveis SUSE/openSUSE. A CVE-2025-6018 é uma vulnerabilidade de injeção de variável de...

CVE-2025-6018_CVE-2025-6019_autopwn

Chained Exploit CVE-2025-6018 & CVE-2025-6019 Auto-Pwn Questo repository contiene una catena di exploit completa "Auto-Pwn" che mira a due vulnerabilità critiche che colpiscono principalmente i sistemi openSUSE Leap 15.x / SUSE : 1. CVE-2025-6018 : Iniezione nell'ambiente PAM. Consente a un utent...

CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation

CVE-2025-6019: Escalation dei privilegi TOCTOU tramite ridimensionamento XFS in udisks2 Questo repository contiene una Proof of Concept PoC per CVE-2025-6019, una vulnerabilità di race condition in udisks2 che consente l'escalation locale dei privilegi tramite il ridimensionamento del filesystem...

CVE-2025-6019

CVE-2025-6019 PoC Einfacher Proof-of-Concept für eine UDisks2-XFS-Resize-Privilegieneskalation. Dateien createpayload.sh: Erstellt ein XFS-Image mit einem SUID-rootbash-Payload. exploit.sh: Löst den Resize-Pfad aus und startet die SUID-Shell. Voraussetzungen mkfs.xfs, udisksctl, gdbus, loginctl...

CVE-2025-6019-exploit

CVE-2025-6019: Privilege-Eskalations-Exploit über UDisks2-Dateisystemvergrößerung Details zur Schwachstelle CVE-ID : CVE-2025-6019 Auswirkung : Lokale Privilegienausweitung LPE Betroffene Systeme : Linux-Systeme mit anfälligen udisks2-Versionen Mechanismus : Race-Condition während der...

HTB-Pterodactyl-Writeup

HackTheBox — Writeup Pterodattilo Difficoltà: Media | Sistema operativo: Linux openSUSE Leap 15.6 | Stagione: 10 Riepilogo Pterodactyl è una macchina Linux di difficoltà media che esegue il pannello di controllo per server di gioco Pterodactyl. La catena d'attacco coinvolge una vulnerabilità...

CVE-2025-6019

CVE-2025-6019: Lokale Privilegienausweitung in libblockdev Zusammenfassung CVE-2025-6019 ist eine Sicherheitslücke zur lokalen Privilegienausweitung LPE in der Bibliothek libblockdev, die mit dem udisks2-Daemon und Polkit zusammenwirkt. Beschreibung der Sicherheitslücke Ein lokaler Angreifer mit...

CVE-2025-6019-Exploitation

CVE-2025-6019 – UDisks2 ResizeFilesystem Sicherheitslücke Reproduktion zu Bildungszwecken Dieses Repository dokumentiert eine Reproduktion von CVE-2025-6019 zu Bildungszwecken, die in einer kontrollierten Laborumgebung Ubuntu VM, nicht produktiv durchgeführt wurde. 🛡️ Sicherheitshinweis Diese...

CVE-2025-6018-6019-PoC

CVE-2025-6018 e CVE-2025-6019: PoC di Escalation dei Privilegi Locali Un Proof of Concept PoC robusto per concatenare CVE-2025-6018 Bypass della Sessione Attiva PAM/Polkit e CVE-2025-6019 Difetto di Montaggio SUID in libblockdev per ottenere accesso root su sistemi Linux vulnerabili. Disclaimer...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 Exploit de PoC Escalação Local de Privilégios LPE - openSUSE / SUSE Linux Enterprise 15 PoC/Exploit funcional para CVE-2025-6018 e CVE-2025-6019 - Escalação de privilégios de usuário não privilegiado para root no openSUSE Leap 15.x e SUSE Linux Enterprise 15.x 🎯 Resumo...

CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Catena di escalation dei privilegi basata solo su script che utilizza CVE-2025-6019 e UDisks2 nessuna immagine del filesystem inclusa. Crediti, Contesto e Catena dell'Exploit Questo repository non introduce una nuova vulnerabilità. La tecnica di escalation dei...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 Exploit-Kette Dieser Exploit wurde entwickelt, um eine HackTheBox-Challenge zu lösen, die openSUSE Leap 15.6 betrifft. Credits Dieser Exploit basiert auf der ursprünglichen Forschung des Qualys Security Teams: Advisory:...

udisks2 security update

An update is available for udisks2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Udisks project provides a daemon, tools, and libraries to access and...

udisks2: udisks2: Local Privilege Escalation via as-user option spoofing

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

Important: Red Hat Security Advisory: udisks2 security update

An update for udisks2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-7867

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

EUVD-2026-54277

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

CVE-2026-7867

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

CVE-2026-7867 Udisks2: udisks2: local privilege escalation via as-user option spoofing

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...