copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC Exploit Local Privilege Escalation LPE - openSUSE / SUSE Linux Enterprise 15 Working PoC/Exploit for CVE-2025-6018 and CVE-2025-6019 - Privilege escalation from unprivileged user to root on openSUSE Leap 15.x and SUSE Linux Enterprise 15.x 🎯 Quick Summary CVE ID|...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

CVE-2025-46811

SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Escáner y Exploit 🚀 Características Escaneo de vulnerabilidades multihilo Shell root interactiva vía WebSocket Modo de ejecución de un solo comando Salida de depuración coloreada Procesamiento por lotes de objetivos 📦 Instalación root@kitploit: git...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers...

Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...

CVE-2025-46808

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

EUVD-2025-210877

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

CVE-2025-46808

SUSE NeuVector manager (versions before 5.4.5 ) is affected by an Insertion of Sensitive Information into Log File vulnerability, where sensitive data is exposed in the manager container's log. The CVSS v3.1 base score is 6.8 (Medium) with a High confidentiality impact but no integrity or availab...

CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

Security update for redis

This update for redis fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

Security update for php-composer2

This update for php-composer2 fixes the following issue: CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt This exploit chains CVE-2025-6018 and CVE-2025-6019 to achieve local privilege escalation from an unprivileged user to root on vulnerable SUSE/openSUSE systems. CVE-2025-6018 is a PAM Pluggable Authentication Modules environment variabl...

Security update for openexr

This update for openexr fixes the following issues: CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation bsc1276850. CVE-2026-61555: crashing occurs when...

Security update for openexr

This update for openexr fixes the following issues: CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes bsc1276849. CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode write...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 bsc1275791. Changes for webkit2gtk3: Update to...