CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: Local Privilege Escalation Chain Target OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x Required access: Unprivileged local user with SSH access Result: Full root shell Overview This document details the manual exploitation of two chained local privilege...

CVE-2025-6018_CVE-2025-6019_autopwn

Chained Exploit CVE-2025-6018 & CVE-2025-6019 Auto-Pwn This repository contains a full exploit chain "Auto-Pwn" targeting two critical vulnerabilities primarily affecting openSUSE Leap 15.x / SUSE systems: 1. CVE-2025-6018 : PAM Environment Injection. Allows a user to modify sensitive variables...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

openSUSE 16 Security Update : go1.27 (openSUSE-SU-2026:22093-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22093-1 advisory. Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866:...

openSUSE 16 Security Update : go1.26 (openSUSE-SU-2026:22095-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22095-1 advisory. Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866...

AusweisApp-2.6.0-1.1 on GA media (moderate)

AusweisApp-2.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12071-1 Rating: moderate Cross-References: CVE-2026-76151 CVE-2026-78253 CVSS scores: CVE-2026-78253 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-78253 SUSE : 7.1...

perl-Net-Whois-Raw-2.99044-1.1 on GA media (moderate)

perl-Net-Whois-Raw-2.99044-1.1 on GA media Announcement ID: openSUSE-SU-2026:12066-1 Rating: moderate Cross-References: CVE-2026-19954 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

chromedriver-154.0.8037.97-1.1 on GA media (moderate)

chromedriver-154.0.8037.97-1.1 on GA media Announcement ID: openSUSE-SU-2026:12063-1 Rating: moderate Cross-References: CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631...

podman-6.1.2-1.1 on GA media (moderate)

podman-6.1.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:12068-1 Rating: moderate Cross-References: CVE-2025-11395 CVE-2026-17106 CVE-2026-79699 CVSS scores: CVE-2025-11395 SUSE : 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-11395 SUSE : 5.1...

perl-Net-OAuth-0.330.0-2.1 on GA media (moderate)

perl-Net-OAuth-0.330.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:12065-1 Rating: moderate Cross-References: CVE-2025-22376 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

openSUSE 16: libopenssl-3-devel / libopenssl-3-fips-provider / etc (openSUSE-SU-2026:22102-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22102-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit m...

python315-3.15.0~rc3-1.1 on GA media (moderate)

python315-3.15.0rc3-1.1 on GA media Announcement ID: openSUSE-SU-2026:12069-1 Rating: moderate Cross-References: CVE-2026-19445 CVE-2026-19553 CVE-2026-82049 CVSS scores: CVE-2026-19445 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2026-19445 SUSE : 8.3...

pi-coding-agent-1.0.2-1.1 on GA media (moderate)

pi-coding-agent-1.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:12062-1 Rating: moderate Cross-References: CVE-2026-102276 CVSS scores: CVE-2026-102276 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:22116-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22116-1 advisory. Changes in hauler: - update to 2.1.1: bumped go version to v1.26.7 backport 771 https registry auth fix backport 763 adjust supporting artifact...

pgvector-devel-0.8.7-1.1 on GA media (moderate)

pgvector-devel-0.8.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:12067-1 Rating: moderate Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-103484 SUSE : 8.7...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC Exploit Local Privilege Escalation LPE - openSUSE / SUSE Linux Enterprise 15 Working PoC/Exploit for CVE-2025-6018 and CVE-2025-6019 - Privilege escalation from unprivileged user to root on openSUSE Leap 15.x and SUSE Linux Enterprise 15.x 🎯 Quick Summary CVE ID|...

OPENSUSE-SU-2026:12179-1 freetype2-devel-2.15.0-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22095-1 Rating: important References: bsc1255111 bsc1284766 bsc1284767 bsc1284768 bsc1284769 bsc1284771 bsc1284773 bsc1284774 bsc1284775 bsc1284776...

golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media (moderate)

golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:12058-1 Rating: moderate Cross-References: CVE-2026-2303 CVSS scores: CVE-2026-2303 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves o...

nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media (moderate)

nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media Announcement ID: openSUSE-SU-2026:12061-1 Rating: moderate Cross-References: CVE-2026-47491 CVE-2026-47492 CVE-2026-47500 CVE-2026-47501 CVE-2026-47504 CVE-2026-47510 CVE-2026-47511 CVE-2026-47514 CVE-2026-47522 CVE-2026-47523...