CVE-2019-18634

CVE-2019-18634 working python exploit on Ubuntu 20.04, sudo version 1.8.25 replace "./shell.sh" with your reverse shell writeup at https://y3a.github.io/2021/04/17/sudo-cve-analysis/...

sudo-cve-2019-14287

La filosofía de sudo Sudo es un programa diseñado para permitir a un administrador del sistema otorgar privilegios de root limitados a los usuarios y registrar la actividad de root. La filosofía básica es otorgar la menor cantidad de privilegios posible pero aun así permitir que las personas haga...

CVE-2021-3156

CVE-2021-3156 PoC de shell root para CVE-2021-3156 sin fuerza bruta Con fines educativos, etc. Probado en Ubuntu 20.04 contra sudo 1.8.31 Todo el crédito de la investigación: Qualys Research Team Consulte los detalles en su blog. Puede verificar si su versión de sudo es vulnerable con: $ sudoedit...

CVE-2021-3156

CVE-2021-3156 Sudo anterior a 1.9.5p2 contiene un error de desfase de uno que puede resultar en un desbordamiento de búfer en el heap, lo que permite la escalada de privilegios a root mediante sudoedit -s y un argumento de línea de comandos que termina con un solo carácter de barra invertida...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

sudotimewarp-cve-2026-96512-

SudoTimeWarp — CVE-2026-96512 sudo: the caller'sTZ decides NOTBEFORE/NOTAFTER Reproduction material for SudoTimeWarp CVE-2026-96512. A sudoers rule whose DateSpec timestamp omits the trailing Z is converted by mktime, which re-reads getenv"TZ" on every call. Because sudo is setuid-root and the...

foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetchlog task. The requestid parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...

CVE-2026-12540 Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetchlog task. The requestid parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...

CVE-2026-12540: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetchlog task. The requestid parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...

Rocky Linux 8.8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel Multiple Vulnerabilities (ciqsa-2026_0970)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260970 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-42465, CVE-2023-28486, CVE-2023-28487. Tenable ha...

Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2025_9978)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259978 advisory. sudo: LPE via host option CVE-2025-32462 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has not...

Rocky Linux 8.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel Multiple Vulnerabilities (ciqsa-2026_0956)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260956 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-22809, CVE-2023-42465, CVE-2023-28486,...

CentOS Linux 8.4 [TuxCare] Security Update: sudo / sudo-devel (CENTOS8.4:CLSA-2026:1777939719)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777939719 advisory. - In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the maile...

Rocky Linux 9.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (ciqsa-2026_1451)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261451 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-35535. Tenable has extracted the preceding description bloc...

CentOS Linux 7 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1785845028)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1785845028 advisory. - A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the enti...

CentOS Linux 7.9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-devel (ciqsa-2026_0741)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260741 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-32462. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_19220)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619220 advisory. sudo: Sudo: Privilege escalation due to failure in privilege drop calls CVE-2026-35535 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 10.1 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_10758)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610758 advisory. sudo: Sudo: Privilege escalation due to failure in privilege drop calls CVE-2026-35535 Tenable has extracted the preceding description block directly from the C...

Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2023_0282)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230282 advisory. sudo: arbitrary file write with privileges of the RunAs user CVE-2023-22809 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource (crlsa-2023_0284)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230284 advisory. sudo: arbitrary file write with privileges of the RunAs user CVE-2023-22809 Tenable has extracted the preceding description block directly from the CIQ security...