CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities

Este repositorio no tiene un README...

CVE-2025-32463_sudo_chroot

CVE-2025-32463 - sudo chroot Uso El Dockerfile crea un entorno de prueba seguro y aislado con una versión vulnerable de sudo 1.9.16p2 instalada. Esto permite probar el exploit sin afectar su sistema anfitrión. Build the vulnerable test environment docker build -t cve . Run the container creates a...

CVE-2024-37081

CVE-2024-37081: Múltiples escaladas de privilegios locales en VMware vCenter Server El servidor vCenter contiene múltiples vulnerabilidades de escalada de privilegios locales debidas a una mala configuración de sudo. Un usuario local autenticado con privilegios no administrativos podría explotar...

USN-8895-1: Sudo vulnerability

It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with timestamps omitting the trailing timezone indicator. A local attacker could possibly use this issue to execute commands outside the intended time window by...

CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build CVE-2021-3156에서 발견된 SUDO 2021 취약점을 고려하여 프로세스 체커를 위한 스크립트를 생성하고, 지정된 프로세스가 존재하면 인증을 호출하여 시스템을 잠그는 시도입니다...

CVE-2025-32462-32463-Detection-Script-

CVE-2025-32462-32463-Detection-Script- Vulnerabilidades críticas de Sudo permiten a los usuarios locales obtener acceso root en Linux, afectando a las principales distribuciones A continuación se muestra una breve descripción de las vulnerabilidades: CVE-2025-32462 puntuación CVSS: 2.8 - Sudo...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched Esta es una versión personalizada de sudo, basada en el paquete sudo 1.8.3p1 proporcionado por Canonical para Ubuntu 12.04 utilizando las URL a continuación, con los parches de CVE-2021-3156 aplicados...

sleepall

sleepall Troyano basado en la vulnerabilidad CVE-2024-28085 https://people.rit.edu/sjf5462/6831711781/wall2272024.txt que aún no se ha corregido en ninguna parte. Esencia: bash soporta códigos de escape y podemos controlar la forma de la línea en la terminal. El troyano escucha procesos y busca e...

-CVE-2019-18634-sudo-pwfeedback

-CVE-2019-18634-sudo-pwfeedback Resumen Este repositorio contiene una prueba de concepto PoC para CVE-2019-18634, una vulnerabilidad en sudo que afecta a sistemas con la opción pwfeedback habilitada. La vulnerabilidad permite a un atacante local escalar privilegios a root explotando un...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Sudo Security Lab Educational project developed in Python focusing on the analysis of the vulnerability CVE-2021-3156 Baron Samedit , a critical flaw in sudo that allowed local privilege escalation on Linux systems. 📌 Project Objective This project was created with the goal of...

MiracleLinux 8 : sudo-1.9.5p2-2.el8_10 (AXSA:2026-1977:06)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1977:06 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding descripti...

Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_75571)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202675571 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description blo...

Fedora 46 : sudo (2026-da6797fbc8)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-da6797fbc8 advisory. Automatic update for sudo-1.9.17-17.p2.fc46. Changelog Tue Oct 6 2026 Alejandro Lpez - 1.9.17-17.p2 - Fix CVE-2026-96512 - Resolves: rhbz2539401 Tenable has...

Rocky Linux 10.2 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_75579)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202675579 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource (crlsa-2026_75580)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202675580 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description blo...

CVE-2026-96512 affecting package sudo for versions less than 1.9.17-4

CVE-2026-96512 affecting package sudo for versions less than 1.9.17-4. A patched version of the package is available...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit Versiones vulnerables 1.9.14 a 1.9.17 bash run.sh Resultado exitoso a continuación neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + CVE-2025-32463 Sudo chroot 漏洞复现脚本 正在创建临时工作目录... 工作目录已创建: /tmp/sudoexploit.nc0EjT 正在创建 C 语言 payload woot1337.c... 正在设置 chroot 环境和恶意的...

CVE-2021-3156

CVE-2021-3156 En este documento incluimos todo el conocimiento necesario para entender el código de este repositorio y por qué funciona. Toda la explicación se basa en el informe creado por QUALYS. Allí se explican otras formas de explotación. Requisitos Las versiones vulnerables de sudo son las...

porfolio-Baron-Samedit

porfolio-Baron-Samedit esto es un estudio sobre CVE-2021-3156: Buffer Overflow Basado en Heap en Sudo Baron Samedit...

CVE-2021-3156

PoC de CVE-2021-3156 Introducción Este es un exploit para la vulnerabilidad CVE-2021-3156 de sudo denominada Baron Samedit por Qualys. Uso compilar: $ make listar objetivos: $ ./sudo-hax-me-a-sandwich ejecutar: $ ./sudo-hax-me-a-sandwich modo manual: $ ./sudo-hax-me-a-sandwich Búsqueda de objetiv...