Terminal2Shell: Critical flaw grants instant shell access on every major OS
(terminal2shell.com)
❤ 2
Getting a shell is bad, but what makes this worse is the insecurity of popular Linux tools that can be used for privilege escalation.
The sudo program has had a known vulnerability since its inception. The developers are incompetent. In some configurations, all you need is the user's password and you can execute arbitrary code as root. Sometimes, no password is needed at all.