Alibaba Cloud Linux 3 : 0274: pam (ALINUX3-SA-2026:0274)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0274 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54411: Linux-PAM through 1.7.2 contains an...

RHSA-2026:61230 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61229 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61228 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61227 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61226 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61225 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61224 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61223 Red Hat Security Advisory: pam security update

Bulletin has no description...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt このエクスプロイトは、CVE-2025-6018 と CVE-2025-6019 を連鎖させ、脆弱な SUSE/openSUSE システム上で、一般ユーザーから root へのローカル特権昇格を実現します。CVE-2025-6018 は、pamenv.so（バージョン 1.3.0～1.6.0）における PAM（Pluggable Authentication Modules）環境変数インジェクションの脆弱性であり、ユーザーが OVERRIDE ディレクティブを使用して...

CVE-2025-6018_CVE-2025-6019_autopwn

Explotación encadenada CVE-2025-6018 y CVE-2025-6019 Auto-Pwn Este repositorio contiene una cadena de exploits completa "Auto-Pwn" dirigida a dos vulnerabilidades críticas que afectan principalmente a sistemas openSUSE Leap 15.x / SUSE : 1. CVE-2025-6018 : Inyección de entorno PAM. Permite a un...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

pam_pkcs11

此项目已不再维护 我 @LudovicRousseau 不再使用这个软件，也没有时间维护它。 参见 "Pam-pkcs11 很快需要新的维护者，否则它将消亡" https://sourceforge.net/p/opensc/mailman/message/35191905/ 如果你想成为新的维护者，只需让我 @LudovicRousseau 将你添加到 https://github.com/orgs/OpenSC/teams/pampkcs11-maintainers 组中。...

copyfail-rs

copyfail-rs PoC multi-vecteur + détection jumelée pour CVE-2026-31431 CopyFail. Inclut un nouveau vecteur de contournement d'authentification PAM qu'aucun autre PoC public ne propose. Le mode détection capture ce qu'AIDE / Wazuh / OSSEC / Tripwire ne peuvent structurellement pas détecter. Binaire...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...