EUVD-2024-29857

Malicious code in bioql PyPI...

Exploit for CVE-2024-32019

CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Sum...

📄 Netdata ndsudo 1.45.0 Privilege Escalation

ndsudo versions 1.45.0 and below have a vulnerability that allows an attacker to achieve privilege escalation. It leverages an untrusted search path, when searching for additional binary files, such as nvme. An attacker can create a malicious binary with the same name and add the directory of thi...

CVE-2024-32019

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019

Netdata CVE-2024-32019 is a local privilege escalation in the ndsudo binary (setuid root) due to an untrusted PATH resolution. Vulnerable in Netdata Agent versions prior to 1.45.3 (e.g., 1.45.0 and earlier); patched in 1.45.3 and 1.45.0-169. Exploitation relies on hijacking allowed commands via P...