D3ltaFormation

2 exploits Active since Jun 2024

CVE-2025-32463 NOMISEC CRITICAL WORKING POC

Sudo <1.9.17p1 - Privilege Escalation

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

CVSS 9.3

View Code

CVE-2024-28397 NOMISEC MEDIUM WORKING POC

pyload-ng js2py - Remote Code Execution

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

CVSS 5.3

View Code