CVE-2025-32463

CVE-2025-32463 - Exploit de Escalada de Privilegios en Sudo Chroot Descripción General CVE-2025-32463 es una vulnerabilidad crítica de escalada local de privilegios en las versiones de sudo 1.9.14 a 1.9.17. Esta vulnerabilidad permite a los atacantes con privilegios de sudo escalar al acceso root...

CVE-2025-32463-EXPLOIT

Xpl0it — Secuestro de la biblioteca NSS de Sudo | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Tipo: Prueba de concepto PoC Herramienta de investigación de seguridad CVE: CVE-2023-42456 Técnica: Inyección de biblioteca NSS en chroot de sudo -R → escalada de privilegios a root ⚠️ Aviso de responsabilidad Esta...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo Privilege Escalation A privilege escalation vulnerability exists in sudo affecting Linux/Unix-based systems. The flaw arises due to improper path validation when sudo is used with the -R --chroot option, allowing attackers to escalate to root via malicious NSS library loadin...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

CVE-2025-32463

📌 CVE-2025-32463 — Escalada Local de Privilegios de Sudo --chroot ID de ExploitDB: 52352 🧠 Visión General Este repositorio documenta una vulnerabilidad crítica de escalada de privilegios local LPE que afecta a las versiones Sudo 1.9.14 – 1.9.17. La vulnerabilidad se debe a una implementación...

CVE-2025-32462_32463-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio PoC Este es un laboratorio basado en contenedores y PoC para las siguientes vulnerabilidades en sudo: CVE-2025-32462 – bypass de la lógica de coincidencia de host sudo -h CVE-2025-32463 – escape de la biblioteca NSS de chroot sudo -R 🔒 Solo con fines...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit Versiones vulnerables 1.9.14 a 1.9.17 root@kitploit: bash run.sh Resultado exitoso a continuación root@kitploit: neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + CVE-2025-32463 Sudo chroot 漏洞复现脚本 正在创建临时工作目录... 工作目录已创建: /tmp/sudoexploit.nc0EjT 正在创建 C 语言 payload...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Astra Linux – Vulnerability in Firefox and Thunderbird

Another issue in the Libraries component of NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

[SECURITY] [DSA 6403-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq -...

Debian dla-4694 : libnss3 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4694 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4694-1 [email protected]...

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-12318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12318 Note that Nessu...

Updated nspr, nss and firefox(-l10n) packages fix security issues

The updated packages fix security vulnerabilities: Incorrect boundary conditions in the Audio/Video: Web Codecs component. CVE-2026-8946 Incorrect boundary conditions in the JavaScript Engine: JIT component. CVE-2026-8388 Use-after-free in the DOM: Bindings WebIDL component. CVE-2026-8947 Other...

RockyLinux 9 : firefox (RLSA-2026:19201)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19201 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2026-1703)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1703 advisory. Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. CVE-2026-6766 Other...

AlmaLinux 10 : thunderbird (ALSA-2026:12285)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:12285 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScri...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2026:1650-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1650-1 advisory. This update for MozillaFirefox fixes the following issue: Update to Firefox Extended Support Release 140.10.0 ESR bsc1262230, MFSA 2026-32: -...

UBUNTU-CVE-2026-6766

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...