5067 matches found
CVE-2025-32463
CVE-2025-32463 - Nessun gcc richiesto Escalation dei privilegi a root tramite sudo, senza NESSUNA NECESSITÀ di avere gcc installato sul target. Scoperto da Rich Mirch. Ho scritto un articolo che spiega la mitigazione dell'attacco qui: Ubuntu Unattended-Upgrades Versioni Affette Vulnerabile: sudo...
ROS-20260824-73-0004
The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
CVE-2025-32463
CVE-2025-32463 Exploit Übersicht Dieses Repository stellt ein Go-basiertes Exploit-Tool für CVE-2025-32463 bereit, eine kritische lokale Privilegienausweitungsschwachstelle CVSS 9.3 in sudo-Versionen 1.9.14 bis 1.9.17. Es ermöglicht nicht autorisierten lokalen Benutzern, Root-Zugriff zu erlangen,...
Shocker-TJNULL-OSCP-
HackTheBox: Shocker Writeup Eine strukturierte und professionelle Anleitung, die die Identifizierung und manuelle Ausnutzung der kritischen Shellshock -Sicherheitslücke zeigt, gefolgt von lokaler Privilegienerweiterung über falsch konfigurierte sudo-Rechte auf einem Linux-Zielsystem. Technische...
ROOT-OS-DEBIAN-11-CVE-2023-42465 CVE-2023-42465 in sudo - Patched by Root
Root has patched CVE-2023-42465 in the sudo package for Root:Debian:11. Multiple fixed versions available...
GO-2026-6188 vulnerabilities
Vulnerabilities for packages: telegraf...
ROOT-OS-UBUNTU-2004-CVE-2025-32462 CVE-2025-32462 in sudo - Patched by Root
Root has patched CVE-2025-32462 in the sudo package for Root:Ubuntu:20.04. Multiple fixed versions available...
CVE-2026-55426
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugin...
CVE-2026-73974 linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper across check plugins. Prior to linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0, lib.lftest.test treated the...
CVE-2026-55426
The shell_exec() function in linuxfabrik-lib splits command strings on pipe characters, enabling command injection via attacker-controlled arguments (e.g., --repo '|touch /root/nagios-was-here|') in plugins like restic-check. If a plugin is in the sudoers file, a compromised nagios/icinga account...
CVE-2026-55426 linuxfabrik-lib: Local privilege escalation using embedded command
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugin...
PT-2026-78229
Name of the Vulnerable Software and Affected Versions linuxfabrik-lib versions prior to 6.1.0 Linuxfabrik Monitoring Plugins versions prior to 7.0.0 Description The lib.lftest.test function in linuxfabrik-lib improperly handles the --test CSV argument by treating its first or second element as a...
CVE-2026-70462
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...
TencentOS Server 3: sssd (TSSA-2026:0846)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0846 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2026-50659 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-RP2P-6CMP-JXJ9 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
Security Bulletin: Vulnerability in SSSD affects IBM Netezza Appliance
Summary The SSSD package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-14474 Vulnerability Details CVEID:CVE-2026-14474 DESCRIPTION: A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured,...
Astra Linux – Vulnerability in sudo
In Sudo, from version 1.9.17p2 until 3e474c2, a failure in the call of setuid, setgid, or setgroups functions, during a privilege drop before running the mailer, is not considered a fatal error. Such failures may lead to an escalation of privileges...
Photon OS 5.0: Sudo PHSA-2025-5.0-91-0544
An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0544. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
