4823 matches found
Security Bulletin: Vulnerability in sudo library (CVE-2025-32462) affects Power HMC.
Summary The sudo library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-32462 DESCRIPTION: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows liste...
sudo_inject
Linux Privilege Escalation by injecting process possessing sudo tokens Inject process that have valid sudo token and activate our own sudo token Introduction We all noticed that sometimes sudo doesn't ask us for a password because he remembers us. How does he remember us and how does he identifie...
Exploit for Off-by-one Error in Sudo_Project Sudo
This is a PoC exploit for CVE-2021-3156, a sudo vulnerability dubbed Baron Samedit by Qualys. The exploit is written in C and uses a heap overflow technique to gain elevated privileges. The exploit is designed to be run on a system with the vulnerable sudo version installed. The usage of the...
Metasploit Weekly Wrap-Up 09/05/2025
Persistence Improvements and Exploits This week, the Metasploit team and the community has made improvements to some persistence modules such as Bash, which improves how they function behind the scenes. They have also been tagged with MITRE ATT&CK techniques. A new exploit has also been added thi...
MAL-2025-46752 Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...
Sudo Chroot 1.9.17 Privilege Escalation
Sudo before version 1.19.17p1 allows user to use chroot option, when executing command. The option is intended to run a command with user-selected root directory if sudoers file allow it. Change in version 1.9.14 allows resolving paths via chroot using user-specified root directory when sudoers i...
Project-Frame-Jacking-The-Gallery-Heist
Executive Summary A comprehensive penetration test was conduc...
Linux Distros Unpatched Vulnerability : CVE-2025-46717
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no or very limited sudo privileges can determine...
Linux Distros Unpatched Vulnerability : CVE-2025-46718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges e.g. execution of a single...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463chwoot English documenthttps://github.com/Yu...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.3)
The version of AHV installed on the remote host is prior to 10.0.1.3 / AHV-10.0.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.3 advisory. - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103068)
The version of AHV installed on the remote host is prior to 20230302.103068. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103068 advisory. - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17,...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.0.5)
The version of AOS installed on the remote host is prior to 7.3.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.0.5 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...
Linux Distros Unpatched Vulnerability : CVE-2018-0493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash,...
Security Bulletin: Vulnerability in Sudo package affects IBM Integrated Analytics System.
Summary The Sudo package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addresed the applicable CVE CVE-2021-3156, CVE-2019-19234, CVE-2019-19232. Vulnerability Details CVEID:CVE-2021-3156 DESCRIPTION: Sudo before 1.9.5p2 contains an off-by-one error that can resu...
Linux Distros Unpatched Vulnerability : CVE-2023-26604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the systemctl statu...
