Cron case

Editable /etc/passwd

Kernel exploit

CP SUID

aria2c SUID

systemctl SUID