CVE-2021-3156

CVE-2021-3156 在本文件中，我们包含了理解本仓库代码及其工作原理所需的所有知识。所有解释均基于 QUALYS 发布的报告。其中还解释了更多利用形式。 要求 受影响的 sudo 版本为 1.8.2 到 1.8.31p2 的旧版本以及 1.9.0 到 1.9.5p1 的所有稳定版本，且均采用默认配置。 本仓库已在 Ubuntu 20.04（sudo 1.8.31）上测试。在此环境中，我们以 root 权限打开一个终端。 分析 如果 Sudo 以 shell 模式执行命令： 通过 -s 选项，该选项设置 sudo 的 MODESHELL 标志。 通过 -i 选项，该选项设置 sud...

ROS-20260824-73-0004

The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

CVE-2025-9384 appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference

A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpeditpostargs of the file /src/tcpedit/parseargs.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading t...

CVE-2025-7569 Bigotry OneBase think_exception.tpl parse_args cross site scripting

A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parseargs of the file /tpl/thinkexception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2025-7569 Bigotry OneBase think_exception.tpl parse_args cross site scripting

A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parseargs of the file /tpl/thinkexception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. Th...