Astra Linux – Vulnerability in zsh

In Zsh before version 5.8, attackers who were able to execute commands could regain privileges lost due to the --no-PRIVILEGED option. Zsh failed to overwrite the saved user ID, so the original privileges could be restored by executing MODULEPATH=/dir/with/module zmodload with a module that calls...

ROS-20250923-02

Vulnerability in the setuid module of the Node.js software platform is related to context switching bugs privileges. Exploitation of the vulnerability could allow an attacker to escalate privileges...

The vulnerability of the setuid() module on the Node.js software platform, which allows a malicious actor to escalate their privileges

The vulnerability of the setuid module in the Node.js software platform is related to context switching errors during privilege escalation. Exploiting this vulnerability can allow an attacker to enhance their privileges...