RHEL 9 : sudo (RHSA-2026:75571)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75571 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

RHEL 10 : sudo (RHSA-2026:75579)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75579 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

sudo security update

1.9.5p2-2.0.1 - Fixes sudo -s unclosed sessions when usepty option used Orabug: 36952911 1.9.5p2-2 RHEL 8.10.0.Z ERRATUM - CVE-2026-96512 - TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-8.10.z Resolves: RHEL-267341 1.9.5p2-1.5 RHEL 8.10.0.Z ERRATUM -...

ALSA-2026:75579 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

ALSA-2026:75571 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

sudo security update

1.9.17p2-3.3 - CVE-2026-96512 sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-9.8.z Resolves: RHEL-267328...

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

ALSA-2026:75580 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

Overview This is a Datto RMM component to mitigate CVE-2021-36934, aka Serious SAM. It follows the mitigation measures outlined at: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK. EXPECT THIS TO BREAK SOME BACKUPS...

CVE-2014-6271-Shellshock

CVE-2014-6271 Shellshock xpl0ited by infrar3d This repository contains a proof‑of‑concept exploit for CVE-2014-6271 Shellshock. Shellshock is a critical vulnerability in GNU Bash where specially crafted environment variables allow arbitrary command execution. When a web server passes HTTP headers...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE Vulnerability Cause Analysis 1. Lack of Code Security Inspection Problem: The system does not perform any security inspection on user-provided source code. Evidence: generateexecutionscript method directly inserts user code into the execution script: code += "\n" +...

Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...

CVE-2020-8816

Notes to defend against this exploit Patching Just do it... now. Subscribe to/watch the Pi-hole repository for new releases and Issues and Pull requests if you're serious. Network Do not expose Pi-hole to the internet. Only expose Pi-hole DNS port 53 to DNS clients, not other ports like managemen...

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – Database Connection String Injection via Env Variable Program Code Python dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dburl =...

CVE-2024-48990

PoC for CVE-2024-48990 CVE-2024-48990 is a local privilege escalation vulnerability found in the needrestart utility. The vuln exists in versions prior to 3.8. The service, which runs as root during events like package installations, insecurely scans all running processes. When it finds a Python...

bash-apocalypse

Bash Apocalypse Automated exploitation toolkit for CVE-2014-6271 Shellshock A complete security research project demonstrating the Shellshock vulnerability that affected millions of servers in 2014. Includes automated scanning, exploitation capabilities, and defensive recommendations. Demo What i...

CVE-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely passes the “HOME” environmental variable to “system”. By altering the “HOME” variable to contain special shell characters Ex: “” or...

CVE-2014-6271-Shellshock-

Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demonstration Lab Shellshock CVE-2014-6271 is one of the most influential remote code execution vulnerabilities ever discovered. The flaw affects Bash and allows attackers to execute arbitrary commands simply by injecting crafted payloads in...

JObfuscator

JObfuscator — Java Source Code Obfuscation & Protection JObfuscator is a source code obfuscator for the Java programming language. It can protect your Java source code and algorithms from hacking, cracking, reverse engineering, decompilation, and technology theft. JObfuscator employs a variety of...