opensuse-leap-privesc-exploit

Catena di Exploit CVE-2025-6018 + CVE-2025-6019 Questo exploit è stato sviluppato per risolvere una sfida HackTheBox mirata a openSUSE Leap 15.6. Credits Questo exploit si basa sulla ricerca originale del Qualys Security Team: Avviso: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-e-CVE-2025-6019-Escalatazione-dei-privilegi Questa è solo una breve nota su come sfruttare queste vulnerabilità per ottenere root. Inizia utilizzando questo tool sulla macchina attaccante: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 Ora dovresti...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Guida all'Escalation dei Privilegi 📋 Passaggi Rapidi per lo Sfruttamento Passo 1: Preparare l'immagine XFS Macchina locale root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt...

HTB-Pterodactyl-Writeup

HackTheBox — Writeup Pterodattilo Difficoltà: Media | Sistema operativo: Linux openSUSE Leap 15.6 | Stagione: 10 Riepilogo Pterodactyl è una macchina Linux di difficoltà media che esegue il pannello di controllo per server di gioco Pterodactyl. La catena d'attacco coinvolge una vulnerabilità...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Este exploit combina CVE-2025-6018 e CVE-2025-6019 para obter escalada de privilégios local de um usuário não privilegiado para root em sistemas vulneráveis SUSE/openSUSE. A CVE-2025-6018 é uma vulnerabilidade de injeção de variável de...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

Istruzioni per eseguire la dimostrazione della vulnerabilità LINK DELL'ISO PER LA VULNERABILITÀ Si prega di scaricare l'immagine del seguente sistema operativo openSUSE-Leap-15.6 con questo link:...

CVE-2025-6018-19-exploit

Este repositorio nao tem um README...

CVE-2025-6019

इस रिपॉजिटरी में README नहीं है।...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 📋...

MiracleLinux 7 : libblockdev-2.18-5.0.1.el7.AXS7 (AXSA:2025-10699:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10699:04 advisory. CVE-2025-6019: don't allow suid and dev set on fs resize CVEs: CVE-2025-6019 A Local Privilege Escalation LPE vulnerability was found in libblockdev...

TencentOS Server 2: libblockdev (TSSA-2025:0535)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0535 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 4: libblockdev (TSSA-2025:0478)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0478 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Huawei EulerOS: Security Advisory for libblockdev (EulerOS-SA-2025-2298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : udisks2 (EulerOS-SA-2025-2312)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

Huawei EulerOS: Security Advisory for libblockdev (EulerOS-SA-2025-2266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : libblockdev (EulerOS-SA-2025-2266)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2249)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : udisks2 (EulerOS-SA-2025-2217)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

EulerOS 2.0 SP11 : libblockdev (EulerOS-SA-2025-2232)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...