#sudo
3 registros
-
Facts
Camaleon CMS 2.9.0: mass assignment (CVE-2025-2304) vira admin, path traversal (CVE-2024-46987) lê a chave SSH e sudo facter dá root.
-
Pipe
SPIP 4.4.13 com RCE pré-auth (CVE-2025-71243) dá shell num container; escape via rsync no host e privesc por kernel.core_pattern (pipe handler).
-
Imagery
App Python/Werkzeug: stored XSS rouba o cookie do admin, LFI exfiltra o source e command injection dá foothold; root via sudo no backup manager charcol.