CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC 漏洞利用 本地权限提升（LPE）- openSUSE / SUSE Linux Enterprise 15 适用于 CVE-2025-6018 和 CVE-2025-6019 的有效 PoC/漏洞利用 - 在 openSUSE Leap 15.x 和 SUSE Linux Enterprise 15.x 上实现从非特权用户到 root 的权限提升 🎯 快速摘要 CVE ID| 漏洞| 影响 ---|---|--- CVE-2025-6018| PAM 环境变量注入| 绕过以获取 allowactive polkit 状态...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 漏洞利用链 该利用工具是为解决一个针对 openSUSE Leap 15.6 的 HackTheBox 挑战而开发的。 致谢 本利用基于 Qualys 安全团队的原始研究： 公告：https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt CVE-2025-6018：在 openSUSE 15 的 PAM 中从低权限提升到 allowactive 的本地提权漏洞 CVE-2025-6019：通过 udisks 在 libblockdev 中从 allowactive...

Security update for mbedtls-2 (important)

openSUSE security update: security update for mbedtls-2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21864-1 Rating: important References: bsc1245810 bsc1252454 Cross-References: CVE-2025-52496 CVE-2025-59438 CVSS scores: CVE-2025-59438 SUSE : 5....

Security update for perl-Net-DNS (moderate)

openSUSE security update: security update for perl-net-dns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21859-1 Rating: moderate References: bsc1272212 bsc1272214 bsc1278084 Cross-References: CVE-2026-64193 CVE-2026-64194 CVE-2026-81928 CVSS...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

脆弱性のデモを実施するための手順 脆弱性用ISOのリンク 以下のOSイメージ（openSUSE-Leap-15.6）をこのリンクからダウンロードしてください： https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso イメージのサイズは約4.4GBです その後、イメージをVagrantfileのディレクトリに配置し、Vagrantfileを編集してください（ISOPATH） インストールの依存関係 virtualbox vagra...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019：本地权限提升链 目标操作系统： openSUSE Leap 15.x / SUSE Linux Enterprise 15.x 所需访问权限： 具有 SSH 访问权限的非特权本地用户 结果： 完整 root shell 概述 本文档详细介绍了由 Qualys 威胁研究部门发现的两个链式本地权限提升漏洞的手动利用方法： CVE-2025-6018 — 通过 /.pamenvironment 进行 PAM 环境变量注入，允许远程 SSH 用户获得通常仅保留给物理在场的控制台用户的 allowactive Polkit 状态。...

CVE-2025-6018_CVE-2025-6019_autopwn

链式漏洞利用 CVE-2025-6018 与 CVE-2025-6019 Auto-Pwn 此仓库包含一个完整的漏洞利用链（"Auto-Pwn"），针对主要影响 openSUSE Leap 15.x / SUSE 系统的两个关键漏洞： 1. CVE-2025-6018 ：PAM 环境注入。允许用户通过 /.pamenvironment 修改敏感变量（如 XDGSEAT），欺骗 systemd-logind 授予扩展权限（allowactive 状态）。 2. CVE-2025-6019 ：通过 UDisks2...

Security update for hauler (critical)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21841-1 Rating: critical References: bsc1265425 bsc1278584 bsc1278934 bsc1279296 bsc1279416 Cross-References: CVE-2026-41888 CVE-2026-56854...

Security update for kimi-code (moderate)

openSUSE security update: security update for kimi-code ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21849-1 Rating: moderate References: bsc1268927 bsc1269951 Cross-References: CVE-2026-45736 CVE-2026-48779 CVSS scores: CVE-2026-45736 SUSE : 4.4...

Security update for google-cloud-sap-agent (important)

openSUSE security update: security update for google-cloud-sap-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21834-1 Rating: important References: bsc1210938 bsc1272128 bsc1278987 bsc1279201 bsc1279304 Cross-References: CVE-2026-56852...

Security update for python-jwcrypto (moderate)

openSUSE security update: security update for python-jwcrypto ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21827-1 Rating: moderate References: bsc1277639 bsc1278707 Cross-References: CVE-2026-80179 CVE-2026-84185 CVSS scores: CVE-2026-80179 SUSE...

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21809-1 Rating: important References: bsc1270127 bsc1271660 bsc1272402 bsc1276514 bsc1276644 bsc1277949 bsc1278270 bsc1278273 bsc1278688...

Security update for systemd (moderate)

openSUSE security update: security update for systemd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21754-1 Rating: moderate References: bsc1237515 bsc1254924 bsc1259418 bsc1259650 bsc1261400 bsc1271444 Cross-References: CVE-2026-16742...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21799-1 Rating: critical References: bsc1278072 bsc1278683 Cross-References: CVE-2026-84323 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326...

Security update for python-sqlparse (moderate)

openSUSE security update: security update for python-sqlparse ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21777-1 Rating: moderate References: bsc1278097 Cross-References: CVE-2026-84305 CVSS scores: CVE-2026-84305 SUSE : 4...

Security update for lxd (critical)

openSUSE security update: security update for lxd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21788-1 Rating: critical References: bsc1223794 bsc1274936 bsc1274937 bsc1274954 bsc1274961 bsc1274963 bsc1275084 bsc1275085 bsc1275090 Cross-Reference...

Security update for cadvisor (important)

openSUSE security update: security update for cadvisor ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21786-1 Rating: important References: bsc1266645 bsc1276727 Cross-References: CVE-2026-39821 CVE-2026-41178 CVSS scores: CVE-2026-39821 SUSE : 7.4...

Security update for bzip2 (low)

openSUSE security update: security update for bzip2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21762-1 Rating: low References: bsc1266786 Cross-References: CVE-2026-42250 CVSS scores: CVE-2026-42250 SUSE : 3.3...

Security update for freeciv (important)

openSUSE security update: security update for freeciv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21800-1 Rating: important References: bsc1278695 bsc1278696 Affected Products: openSUSE Leap 16.0...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...