CVE Listesine Dön
CVE-2025-6018

Incorrect authorization in Suse Pam Config

CVSS Skor

7.8

EPSS İhtimal

%1.1

Risk Skoru

0.1

Yayın

1 yıl önce

Overview (Genel Bakış)Public Exploits (14)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn
GitHub

Auto exploit for CVE-2025-6018 & CVE-2025-6019 based on https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019 (★1)

Public PoCKaynak güncellemesi: 17.02.2026 12:39:29
G
ibrahmsql/CVE-2025-6018
GitHub

CVE-2025-6018 Poc and Exploit (★0)

Public PoCKaynak güncellemesi: 25.07.2025 07:47:55
G
B1ack4sh/Blackash-CVE-2025-6018
GitHub

CVE-2025-6018 (★0)

Public PoCKaynak güncellemesi: 31.07.2025 07:21:33
G
AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation
GitHub

This is just a quick note on how to exploit these vulnerabilities to get root. (★0)

Public PoCKaynak güncellemesi: 09.02.2026 13:47:13
G
muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
GitHub

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Exploit (★0)

Public PoCKaynak güncellemesi: 09.02.2026 20:14:09
G
0rionCollector/Exploit-Chain-CVE-2025-6018-6019
GitHub

Exploit Chain of CVE-2025-6018 to CVE-2025-6019 (★0)

Public PoCKaynak güncellemesi: 10.02.2026 01:20:35
G
MichaelVenturella/CVE-2025-6018-6019-PoC
GitHub

A Proof of Concept for chaining CVE-2025-6018 (PAM/Polkit Active Session Bypass) and CVE-2025-6019 (libblockdev SUID Mount Flaw) to achieve Local Privilege Escalation (LPE) on vulnerable Linux systems. (★0)

Public PoCKaynak güncellemesi: 10.02.2026 05:38:51
G
matesz44/CVE-2025-6018-19
GitHub

CVE-2025-6018 (pam LPE unpriv->allow_active), CVE-2025-6019 (udisks LPE allow_active->root) in sh (★0)

Public PoCKaynak güncellemesi: 11.02.2026 09:51:58
G
DesertDemons/CVE-2025-6018-6019
GitHub

CVE-2025-6018 CVE-2025-6019 PoC Exploit - Local Privilege Escalation in openSUSE/SUSE Linux Enterprise 15 - PAM bypass + udisks2 XFS race condition LPE to root (★0)

Public PoCKaynak güncellemesi: 13.02.2026 06:35:54
G
localh0ste/CVE-2025-6018-and-CVE-2025-6019
GitHub

Vulnerability chaining leads to privilege escalation (★0)

Public PoCKaynak güncellemesi: 14.02.2026 00:33:39
G
MaxKappa/opensuse-leap-privesc-exploit
GitHub

Privilege escalation exploit chain (CVE-2025-6018 + CVE-2025-6019) for openSUSE Leap 15.6 (★0)

Public PoCKaynak güncellemesi: 15.02.2026 03:18:20
E
Linux PAM Environment - Variable Injection Local Privilege Escalation
Exploit-DB

Linux PAM Environment - Variable Injection Local Privilege Escalation

Exploit referansıKaynak güncellemesi: 28.07.2025 00:00:00
N
https://bugzilla.suse.com/show_bug.cgi?id=1243226
NVD reference

https://bugzilla.suse.com/show_bug.cgi?id=1243226

Exploit referansı
N
https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt
NVD reference

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt

Exploit referansı

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-6018"