CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo 权限提升 PoC 概述 CVE-2024-32019 是 Netdata 的 SUID 辅助程序 ndsudo 中的一个本地权限提升漏洞，它允许本地用户通过不受信任的搜索路径（PATH 劫持）以 root 身份执行任意程序。 问题在于 ndsudo 限制了命令名称，但使用调用者的 PATH 来解析这些命令，从而允许用户将恶意二进制文件放在 PATH 的更前面，并让 ndsudo 以 root 权限运行它。 它影响 Netdata Agent 版本 ≥ v1.45.0 且 712 --.-KB/s in 0s 2025-09-10...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo 本地权限提升工作流及POC CVE-2024-32019 工作流 自动利用 资源 工作流 !TIP 请先阅读 Netdata 是一个提供应用和系统监控的工具，运行在19999端口，容易发现： root@kitploit: test@test:$ netstat -tuln Active Internet connections only servers Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:19999...

CVE-2024-32019-ndsudo-local-privilege-escalation-NetData

CVE-2024-32019 Prueba de Concepto Python Una implementación en Python del exploit de Escalada de Privilegios Local LPE para Netdata CVE-2024-32019. Este script explota una vulnerabilidad en el componente ndsudo donde la variable de entorno PATH no está saneada correctamente. Esto permite a un...

-Netdata-PrivEsc-CVE-2024-32019

CVE-2024-32019-Netdata-ndsudo-PrivEsc CVE-2024-32019: Netdata ndsudo PrivEsc HTB Editor 用于利用 Netdata 的 SUID 二进制文件 ndsudo 中 PATH 劫持 漏洞的自动化 Bash 脚本（CVE-2024-32019）。该漏洞利用程序经过专门调整，以绕过在加固环境（如 Hack The Box 的 Editor 机器）中常见的限制。 🎓 教育免责声明 本仓库及其中包含的脚本严格仅用于教育和网络安全研究目的。 作者不对因使用本材料而可能产生的滥用或损害负责。本脚本设计用于受控的实验室环境...

-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 漏洞利用说明 CVE-2024-48990 - Pure Python 该脚本通过劫持库路径（ PYTHONPATH hijacking ）利用 Linux 工具 needrestart 中的漏洞 CVE-2024-48990 。与原始攻击向量不同，此方法仅使用 Python，从而绕过了在目标机器上安装 gcc 等编译器的要求。 逐步工作原理 1. 目录结构： 创建目录 /tmp/malicious/importlib。这模仿了 Python 标准库的结构。 2. 恶意载荷（importlib/init.py）：...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-81192

CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2024-32019-POC

ndsudo を介した権限昇格 Netdata ローカルエクスプロイト このPOCは、Netdataにバンドルされている脆弱な ndsudo ユーティリティを悪用して、ローカル権限をrootに昇格させるために使用されます。このエクスプロイトは、ユーザーの PATH に悪意のあるバイナリを注入し、それが信頼されたコマンド nvme を装って ndsudo によってroot権限で実行される仕組みです。 前提条件と仮定 ターゲットシステム上でローカルシェルアクセス があること。 次のコマンドを実行できるが、「not found」または類似のエラーで失敗すること： root@kitploit:...

CVE-2026-82649

SiYuan Windows installer versions >= 2.0.14 and before 3.8.1 contain an uncontrolled search path vulnerability in its NSIS installer . The installer invokes system executables such as TASKKILL by name rather than by absolute path, and because NSIS nsExec::Exec resolves these calls using a sear...

EUVD-2026-63696

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

CVE-2025-0041

Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...

EUVD-2025-210694

Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...

PT-2026-70360

Name of the Vulnerable Software and Affected Versions Vitis Embedded Single File Download SFD affected versions not specified Description Uncontrolled search paths in the local Windows installation of the Vitis Embedded Single File Download SFD may allow a low-privileged user to achieve arbitrary...

PT-2026-70333

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

GO-2026-5426 Opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking in go.opentelemetry.io/otel/sdk

Opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking in go.opentelemetry.io/otel/sdk...

Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-24051.

Summary OpenTelemetry Collector is used by the CP4D Scheduling Service for telemetry collection. CVE-2026-24051. Vulnerability Details CVEID:CVE-2026-24051 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to...

Operation-West-Wild-2.0

Operation West Wild 2.0 – Penetration Testing Report 📌 Ove...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-24051 DESCRIPTION:...

CVE-2026-39883

A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the kenv command. By manipulating the system's PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromi...