5598 matches found
CVE-2019-18634-writeup
Analisi della CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Buffer Overflow PoC L'opzione pwfeedback di Sudo può essere utilizzata per fornire un feedback visivo quando l'utente inserisce la propria password. A ogni pressione di un tasto viene stampato un...
EulerOS Virtualization 2.13.0 : sudo (EulerOS-SA-2026-3241)
According to the versions of the sudo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the...
EulerOS Virtualization 2.13.1 : sudo (EulerOS-SA-2026-3201)
According to the versions of the sudo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the...
ROS-20260824-73-0004
The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
GO-2026-6188 vulnerabilities
Vulnerabilities for packages: telegraf...
ROOT-OS-UBUNTU-2004-CVE-2025-32462 CVE-2025-32462 in sudo - Patched by Root
Root has patched CVE-2025-32462 in the sudo package for Root:Ubuntu:20.04. Multiple fixed versions available...
CVE-2026-53548: Improper Authorization
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.6.1, the GET /host/db/host/:id/password endpoint in src/backend/database/routes/host.ts accepts an authenticated user's numeric host ID and the field=password or...
CVE-2026-55426
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugin...
CVE-2026-73974 linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper across check plugins. Prior to linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0, lib.lftest.test treated the...
CVE-2026-55426
The shell_exec() function in linuxfabrik-lib splits command strings on pipe characters, enabling command injection via attacker-controlled arguments (e.g., --repo '|touch /root/nagios-was-here|') in plugins like restic-check. If a plugin is in the sudoers file, a compromised nagios/icinga account...
CVE-2026-55426 linuxfabrik-lib: Local privilege escalation using embedded command
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugin...
CVE-2026-55426 linuxfabrik-lib: Local privilege escalation using embedded command
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugin...
PT-2026-78229
Name of the Vulnerable Software and Affected Versions linuxfabrik-lib versions prior to 6.1.0 Linuxfabrik Monitoring Plugins versions prior to 7.0.0 Description The lib.lftest.test function in linuxfabrik-lib improperly handles the --test CSV argument by treating its first or second element as a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sssd (UTSA-2026-100784)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100784 advisory. A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for...
privil_edge
priviledge !CIhttps://github.com/Ianemwel679/priviledge...
CVE-2026-70462
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...
OESA-2026-3364 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On...
OESA-2026-3363 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-3362 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...