10181 matches found
CVE-2019-12815
CVE-2019-12815 ProFTPd modcopy - escáner masivo de copia arbitraria de archivos sin autenticación...
CVE-2026-31431
CVE-2026-31431 "Copy Faill" CVE-2026-31431 Archive and Analysis. Source code for attack Testing Sniffing Tools for the potential Vulnerability. Solution root@kitploit: 禁用内核模块 echo "install algifaead /bin/false" /etc/modprobe.d/disable-algif-aead.conf 卸载已加载模块 rmmod algifaead 2/dev/null...
copy-fail-zig
Copy Fail CVE-2026-31431 Zig implementation Zig implementation of the 732 Byte proof of concept for the Copy Fail Linux LPE CVE-2026-31431, which was disclosed by Theori / Xint on April 29th 2026 The writeup can be found at copy.fail. This implementation has no runtime dependencies and can be run...
CVE-2026-31431
CVE-2026-31431 Copy Fail Checker Checks whether a Linux host is vulnerable to CVE-2026-31431 and applies mitigation. Files checkcve202631431.yml - Ansible playbook to verify and patch revertcve202631431.yml - Ansible playbook to undo mitigation runcheck.sh - Script to run verification locally or...
copy-fail-CVE-2026-31431
Usage Compile statically to be able to use in any Linux environment with no need of Python or aditional libraries. root@kitploit: gcc -o exploit exploit.c -lz -static ./exploit Or run the python script root@kitploit: python3 exploit.py...
CVE-2025-1094-Lab-Setup
🛠️ CVE-2025-1094 Lab Setup ⚠️ Disclaimer This lab is for educational and research purposes only. Do NOT use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods may violate laws and result in severe...
cve-2026-31431
CVE-2026-31431 Copy Fail Detection and Mitigation Tool This project provides a set of Bash scripts for detecting and mitigating CVE-2026-31431 also known as "Copy Fail", a Linux kernel local privilege escalation vulnerability. Vulnerability Overview CVE ID : CVE-2026-31431 Vulnerability Type :...
CVE-2026-31431-C
Copy-Fail Exploit CVE-2026-31431 Local privilege escalation exploit targeting a Linux kernel copy-on-write vulnerability via AFALG sockets and splice operations. Overview This exploit abuses a kernel-level memory corruption condition in the Linux crypto subsystem AFALG combined with zero-copy...
CVE-2026-31431---Copy-Fail-PoC
Description This repository contains an analysis of CVE-2026-31431 Copy Fail in the Linux kernel. It targets local privilege escalation LPE through page cache manipulation. Legal Notice This project is for educational and testing purposes only. Any unauthorized use is the sole responsibility of t...
copy-fail-CVE-2026-31431-pythonlower3.10
copy-fail-CVE-2026-31431-python3.10 python3.10 and below do not have os.splice, so I made a version that works on versions below 3.10 as well Based on https://github.com/theori-io/copy-fail-CVE-2026-31431...
cPanel-Fix
cPanel & kernel security helper One security-remediation.sh for CVE-2026-41940 cPanel, CVE-2026-31431 kernel "Copy Fail", CSF, optional domain/proxy cleanup, and optional operator hardening. Maintainer: Aria Jahangiri Far Clone root@kitploit: git clone https://github.com/MrAriaNet/cPanel-Fix.git ...
CVE-2023-0386_POC
Equipo CVE-MD Este repositorio proporciona una prueba de concepto para CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Miembros del equipo: Bǎnicǎ Dragoș-Marius y Borsos Matheas-Roland Aquí está el video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalada de...
exploit-CVE-2015-3306
ProFTPd 1.3.5 - modcopy Ejecución Remota de Comandos ProFTPD es un demonio FTP altamente configurable para sistemas operativos Unix y similares a Unix. ProFTPD surgió del deseo de tener un servidor FTP seguro y configurable. Fue inspirado por una gran admiración hacia el servidor web Apache. A...
PT-2026-89138
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...
xmldom: Quadratic-memory consumption
Summary When an element declares a namespace prefix, xmldom copies the entire in-scope namespace map into a fresh object and keeps that copy on the element while it is open on the parse stack. A crafted document that nests N elements, each declaring one unique prefix, therefore drives the parser ...
EUVD-2026-69706
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path...
Detection-Tool-Kit-for-CVE-2026-31431
copyfail-detect Kit de detección para CVE-2026-31431 "Copy Fail", una técnica de escalada de privilegios local del kernel de Linux que corrompe los datos de la caché de páginas sin modificar el archivo en el disco. Por qué existe Copy Fail puede eludir la supervisión tradicional de integridad de...
CVE-2026-72985
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-72985
A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...