CVE-2025-32463

CVE-2025-32463 Local Privilege Escalation to Root via Sudo chroot in Linux 🛑 Vulnerability Summary CVE-2025-32463 is a local privilege escalation vulnerability in the Sudo binary. The flaw allows a local user to escalate privileges to root under specific misconfigurations or with crafted inputs...

CVE-2025-32463

Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Executing the PoC on Ubuntu 24.04.2 LTS server with Sudo v1.9.15p5, using an unprivileged user with no Sudo rules defined, results in a root shell outside of the chrooted environment. lowpriv@prod:/CVE-2025-3246...

CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – PoC Lab This is a container-based lab and PoC for the following vulnerabilities in sudo: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape 🔒 For educational purposes only. Do not use on systems you don’t own or...

CVE-2025-32463-sudo-chwoot

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

CVE-2025-32463_Sudo_PoC

CVE-2025-32463SudoPoC PoC for CVE-2025-32463: Local privilege escalation in sudo via --chroot. Exploits NSS module injection through crafted chroot environments. Designed for security researchers and lab-only environments. CVE-2025-32463 - Local Privilege Escalation via sudo --chroot A Python-bas...

CVE-2025-32463

CVE-2025-32463 - No gcc required Privilege escalation to root via sudo, with NO NEED for gcc to be installed on the target. Discovered by Rich Mirch. I have written an article explaining the attack mitigation here: Ubuntu Unattended-Upgrades Affected Versions Vulnerable: sudo 1.9.14, 1.9.15,...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI escalation to RCE Testing environment: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 During a security assessment the presence of CVE-2014-2383 was discovered. This document is a proof of concept and does not include the details from the initial discovery in order to protect...

CVE-2025-32463

CVE-2025-32463 Exploit --- Proof-of-Concept PoC DISCLAIMER: This repository contains a proof-of-concept intended only for educational, defensive research, and authorized penetration testing. Do NOT use this code on systems you do not own or do not have explicit written permission to test...

CVE-2024-3094-backdoor-env-container

CVE-2024-3094 SSH Backdoor Container Env This is an environment running CVE-2024-3094 sshd backdoor instance, working with this exploit: https://github.com/amlweems/xzbot. Experiments Test in Docker IT IS NOT a Docker container. I had tried making this vulnerability env with docker but failed: 1...

CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...

CVE-2025-32463_chwoot

🛠️ CVE-2025-32463chwoot - Securely Handle Privileges in Linux 📋 Overview CVE-2025-32463chwoot helps you understand and deal with a specific security vulnerability related to privilege escalation in Linux systems. This tool allows users to explore and test the escalation of privilege to the root...

CVE-2025-32463

CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

CVE-2025-32463

🚨 PoC: CVE-2025-32463 – Sudo chroot Escape Vulnerability A critical vulnerability affecting sudo versions 1.9.0 to 1.9.17p1 , allowing users to escape from chroot and gain access to the real root filesystem. 📌 Description CVE-2025-32463 is a local privilege escalation vulnerability in sudo that...

CVE-2025-32462-32463-Detection-Script-

CVE-2025-32462-32463-Detection-Script- Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros A brief description of the vulnerabilities is below - CVE-2025-32462 CVSS score: 2.8 - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host...

CVE-2025-32463

README - sudo-chwoot.sh Description This script is a proof of concept PoC that demonstrates a privilege escalation technique exploiting a theoretical vulnerability in 'sudo' e.g. CVE-2025-32463. The PoC forces 'sudo' to load a manipulated .so library by leveraging the '-R' chroot functionality an...

CVE-2025-32463

CVE-2025-32463 Local Privilege Escalation to Root via Sudo chroot in Linux. What's This? For the news, you can read here: https://www.helpnetsecurity.com/2025/07/01/sudo-local-privilege-escalation-vulnerabilities-fixed-cve-2025-32462-cve-2025-32463/ TL;DR and CMIIW So, sudo is a command to run a...

CVE-2025-32463

CVE-2025-32463 – Sudo EoP Exploit PoC with precompiled library This repository contains a proof-of-concept PoC exploit for CVE-2025-32463 , a local privilege escalation vulnerability in sudo discovered by Rich Mirch. Credit https://github.com/kh4sh3i/CVE-2025-32463 ⚠️ Disclaimer This PoC is for...

CVE-2025-32463_illdeed

CVE-2025-32463 — sudo -R Privilege Escalation Exploit illdeed Variant This is a refactored proof-of-concept PoC exploit for CVE-2025-32463, a critical vulnerability in sudo versions 1.9.14 through 1.9.17 that allows local privilege escalation to root via sudo -R and a fake NSS module. ⚠️ This...