CVE-2026-31431-exploit

CVE-2026-31431 警告 これらのLinux LPEエクスプロイト実装は、実行時に破壊的 です。 特権対象のライブなページキャッシュビュー を上書きします。対象は以下の通りです: su PAM設定ファイル patchモードに渡された任意のファイル これは通常、永続的なディスク上の編集ではありませんが、実行時の動作を変更 し、認証・権限フローに即座に影響を与える可能性があります。 このリポジトリは、完全に非破壊的なroot モードを提供しません。 ファイル copyfailrawsuroot.c copyfailportablelpe.c どちらもLinux専用 です。...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 권한 상승 가이드 中文 📋 빠른 익스플로잇 단계 1단계: XFS 이미지 준비 로컬 머신 300MB XFS 이미지 생성 dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image 마운트 및 SUID bash 설치 mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp /bin/bash mnt/bash sudo chmod 4755 mnt/bash sudo umount mnt rmdir...

chef-os-hardening

os-hardening Chef cookbook 1 2 説明 このcookbookは、数多くのセキュリティ関連設定を提供し、全体的な基本保護を実現します。 以下の設定を行います: パッケージ管理の設定（例: 署名済みパッケージのみを許可） 既知の問題があるパッケージの削除 pam および pamlimits モジュールの設定 Shadow password suite の設定 システムパス権限の設定 ソフトリミットによるコアダンプの無効化 システムコンソールへのrootログインの制限 SUIDの設定 sysctlによるカーネルパラメータの設定 以下のことは行いません:...

CVE-2026-12504

Loytec LINX firmware (LINX-A64) products LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD are affected by an Improper Authentication (CWE-287) in PAM configuration through 8.4.16. The root cause is improper PAM authentication that allows a local attacker to authenticate as uid=0 w...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 📋...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018 + CVE-2025-6019 Exploit Chain This exploit was...

Exploit for Incorrect Authorization in Suse Pam-Config

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation This is j...

CVE-2025-24531

A flaw was found in pampkcs11. The pamsmauthenticate function wrongly returns PAMIGNORE in some communication errors with a smartcard or PKCS11 token, such as a smartcard being removed or a hardware failure. In some specific PAM configurations, this return code allows the authentication process t...

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2026-1010)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2014-7729

Malware in sbrugna...

EUVD-2015-8209

Malware in sbrugna...

EUVD-1999-1327

Malware in sbrugna...

EUVD-2011-4068

Malware in sbrugna...

SUSE-SU-2025:02081-1 Security update for pam-config

This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack bsc1243226...

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

Cybersecurity researchers have uncovered two local privilege escalation LPE flaws that could be exploited to gain root privileges on machines running major Linux distributions. The vulnerabilities, discovered by Qualys, are listed below - CVE-2025-6018 - LPE from unprivileged to allowactive in...

Qualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks

The Qualys Threat Research Unit TRU has discovered two linked local privilege escalation LPE flaws. The first CVE-2025-6018 resides in the PAM configuration of openSUSE Leap 15 and SUSE Linux Enterprise 15. Using this vulnerability, an unprivileged local attacker—for example, via SSH—can elevate ...

CVE-2006-6683

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM...

pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this...

PT-2024-27527 · Fprintd · Fprintd

Name of the Vulnerable Software and Affected Versions: fprintd versions 1.94.3 and earlier Description: The issue is related to the lack of a security attention mechanism in fprintd, which may lead to unexpected actions being authorized by auth sufficient pam fprintd.so for Sudo. This could...