CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

Security update for openssl-certs

This update for openssl-certs fixes the following issue: Updated to 2.90 state bsc1279961: Removed: AffirmTrust Commercial AffirmTrust Networking AffirmTrust Premium AffirmTrust Premium ECC certSIGN ROOT CA Entrust Root Certification Authority PKI Root Certification Authority FIRMAPROFESIONAL CA...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-neededheadroom bsc1242405 bsc1275784. CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944...

SUSE-SU-2026:4279-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-neededheadroom bsc1242405 bsc1275784. - CVE-2024-57841: net: fix memory leak in tcpconnrequest...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Este exploit encadena CVE-2025-6018 y CVE-2025-6019 para lograr una escalada de privilegios local desde un usuario no privilegiado a root en sistemas SUSE/openSUSE vulnerables. CVE-2025-6018 es una vulnerabilidad de inyección de variabl...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC Exploit Local Privilege Escalation LPE - openSUSE / SUSE Linux Enterprise 15 Working PoC/Exploit for CVE-2025-6018 and CVE-2025-6019 - Privilege escalation from unprivileged user to root on openSUSE Leap 15.x and SUSE Linux Enterprise 15.x 🎯 Quick Summary CVE ID|...

CVE-2025-46811

SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Escáner y Exploit 🚀 Características Escaneo de vulnerabilidades multihilo Shell root interactiva vía WebSocket Modo de ejecución de un solo comando Salida de depuración coloreada Procesamiento por lotes de objetivos 📦 Instalación root@kitploit: git...

SUSE SLES12: dovecot22 / dovecot22-backend-mysql / dovecot22-backend-pgsql / etc (SUSE-SU-2026:4271-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4271-1 advisory. This update for dovecot22 fixes the following issue: - CVE-2026-40016: Sieve :contains/:matches ONxM substring match bypasses sievemaxcputim...

SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-aom / libheif-dav1d / etc (SUSE-SU-2026:4276-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4276-1 advisory. - CVE-2026-84383: Heap buffer overflow in scalenearestneighbor via duplicate alpha planes from nested iden/aux...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4273-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4273-1 advisory. - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. -...

SUSE SLES12: openCryptoki / openCryptoki-32bit / openCryptoki-64bit / etc (SUSE-SU-2026:2685-2)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2685-2 advisory. This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to informatio...

SUSE-SU-2026:23459-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

Security update for dovecot22

This update for dovecot22 fixes the following issue: CVE-2026-40016: Sieve :contains/:matches ONxM substring match bypasses sievemaxcputime limit bsc1265148. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:4020-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4020-1 advisory. - CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728,...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:3990-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3990-1 advisory. This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Tenable ha...

SUSE SLED15: libecpg6 / libpq5 / libpq5-32bit / postgresql18 / etc (SUSE-SU-2026:4014-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4014-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. -...

SUSE SLES15: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (SUSE-SU-2026:4013-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4013-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...