90 matches found
cve-2025-32463-lab
CVE-2025-32463 – Sudo-chroot-Lab für lokale Privilegienausweitung Dieses Repository enthält ein Docker-basiertes Labor und einen Proof-of-Concept-Exploit für CVE-2025-32463, eine lokale Privilegienausweitungsschwachstelle in sudo Versionen 1.9.14 bis 1.9.17. 🚨 Haftungsausschluss Dieser Code dient...
CVE-2025-32463_illdeed
CVE-2025-32463 — Exploit de Escalação de Privilégio via sudo -R Variante illdeed Este é um exploit de prova de conceito PoC refatorado para CVE-2025-32463, uma vulnerabilidade crítica nas versões 1.9.14 a 1.9.17 do sudo que permite escalação local de privilégio para root via sudo -R e um módulo N...
CVE-2025-32463_POC
nsswitch.conf के डिफ़ॉल्ट मानों की जाँच कर रहा है: root@kitploit: passwd: files systemd chroot कॉल करने के बाद, sudo कमांड चलाने के लिए nsswitch.conf पर कॉन्फ़िग मानों को पार्स करने का प्रयास करता है, जो इसे libnsssystemd.so.2 को खोलने का प्रयास करने की ओर ले जाता है।...
CVE-2025-32463_Sudo_PoC
CVE-2025-32463SudoPoC PoC für CVE-2025-32463: Lokale Privilegieneskalation in sudo via --chroot. Exploitiert NSS-Modul-Injektion durch manipulierte chroot-Umgebungen. Konzipiert für Sicherheitsforscher und Laborumgebungen. CVE-2025-32463 - Lokale Privilegieneskalation via sudo --chroot Ein...
CVE-2025-32463-Sudo-Chroot-Escape
CVE-2025-32463-Sudo-Chroot-Escape Beschreibung Dieses Repository enthält einen auf Python basierenden Proof of Concept PoC für CVE-2025-32463, eine lokale Privilegienausweitungsschwachstelle in den Sudo-Versionen 1.9.14 bis 1.9.17. Wenn ein Benutzer über Sudo-Berechtigungen verfügt, um einen Befe...
OESA-2026-3032 cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled...
OESA-2026-3028 cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled...
Amazon Linux 2023 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2023-2026-1927)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1927 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...
cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
DEBIAN-CVE-2026-12505
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
CVE-2026-12505
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
CVE-2026-12505
CVE-2026-12505 concerns the cifs-utils package. The issue: the root-owned cifs.upcall fails to securely drop root privileges before consulting user information, allowing a local, low-privilege attacker to craft a request_key payload that causes the process to enter a controlled environment with a...
CVE-2026-35368
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...
CVE-2026-35368
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...
CVE-2026-34397
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...
EUVD-2026-17983
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...
PT-2026-29576
Name of the Vulnerable Software and Affected Versions Himmelblau versions 2.0.0-alpha through 2.3.8 and 3.0.0-alpha through 3.1.0 Description Himmelblau, an interoperability suite for Microsoft Azure Entra ID and Intune, contains a conditional local privilege escalation issue due to an edge-case...
EUVD-2010-0852
Malware in sbrugna...