EUVD-2022-40027

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-26604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the systemctl statu...

CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2024-28139

The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future...

CVE-2023-44120

A vulnerability has been identified in Spectrum Power 7 All versions V23Q4. The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access...

CVE-2023-36624

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement...

CVE-2022-41347

An issue was discovered in Zimbra Collaboration ZCS 8.8.x and 9.x e.g., 8.8.15. The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes...

CVE-2021-30462

VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts...

CVE-2020-27985

Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...

CVE-2020-25618

An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root i.e., the use of root privileges is not limited to specific programs listed in the sudoers fi...

CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2025-32980

NETSCOUT nGeniusONE is affected by CVE-2025-32980 due to a weak sudo configuration in versions prior to 6.4.0 P11 b3245. The root cause is described as an improper sudo setup, enabling elevated privileges under certain conditions. Remediation per PT-2025-17938 indicates upgrading to version 6.4.0...

PT-2025-17938 · Unknown · Ngeniusone

Name of the Vulnerable Software and Affected Versions: nGeniusONE versions prior to 6.4.0 b2350 Description: The issue is related to a weak sudo configuration. Recommendations: For versions prior to 6.4.0 b2350, update to version 6.4.0 b2350 or later to resolve the issue...

VMware vCenter Server 8.0.2 Privilege Escalation

VMware vCenter Server version 8.0.2 proof of concept privilege escalation exploit that leverages a vulnerability from 2024. ============================================================================================================================================= | Title : VMware vCenter Server...

CVE-2024-28139

The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future...

CVE-2024-28139

The CVE-2024-28139 issue involves the www-data user gaining root privileges because sudo is configured to permit the mount command to run as root without a password. This is a privilege escalation via sudo misconfiguration, not a flaw in a specific application feature. The current narrative acros...

Granular sudo Permissions for Management of Veeam Agent for Oracle Solaris

Purpose This article provides examples of granular 'sudo' configuration for the Linux account that will be used by Veeam Backup & Replication when managing Veeam Agent for Oracle Solaris deployments with a Protection Group. Solution The following granular sudo permissions were tested with Veeam...

systemd: privilege escalation via the less pager

A vulnerability was found in the systemd package. The systemd package does not adequately block local privilege escalation for some sudo configurations, for example, plausible sudoers files, in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to ...