Lucene search
+L

9 matches found

Kitploit
Kitploit
•added 2026/10/06 11:39 a.m.•15 views

copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix A temporary mitigation against copyfail variant copyfail2electricboogaloo - Unprivileged Linux LPE via xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path. Page-cache write into any readable file. Overwrites a nologin line in /etc/passwd with sick::0:0:…:/:/bin/bash and s...

7.8CVSS6.9AI score0.03437EPSS
SaveExploits245
Kitploit
Kitploit
•added 2026/10/05 12:21 a.m.•2 views

Copy_Fail2-Electric_Boogaloo

Copy Fail 2: Electric Boogaloo LPE de Linux sin privilegios mediante la ruta rápida no-COW de xfrm ESP-in-UDP MSGSPLICEPAGES. Escritura en la caché de páginas de cualquier archivo legible. Sobrescribe una línea nologin en /etc/passwd con sick::0:0:...:/:/bin/bash y hace su hacia ella. Misma clase...

7.8CVSS6.2AI score0.03437EPSS
SaveExploits245
Kitploit
Kitploit
•added 2026/10/01 7:12 p.m.•45 views

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Implementación en Python Puerto en Python del exploit de kernel CopyFail2 que aprovecha la ruta rápida sin copy-on-write de MSGSPLICEPAGES en xfrm ESP-in-UDP para la escalada local de privilegios en Linux sin privilegios. Reemplaza una entrada nologin/false en /etc/pass...

7.8CVSS6.9AI score0.03437EPSS
SaveExploits245References1
Kitploit
Kitploit
•added 2026/09/30 9:21 p.m.•8 views

CVE-2026-43503

CVE-2026-43503 DirtyClone - 概念验证 - SecurewithUmer DirtyClone 的概念验证 — 一种 Linux 内核本地权限提升漏洞。 此仓库包含一个有效的概念验证 ,该验证允许非特权本地用户通过利用通过克隆套接字缓冲区导致的页缓存损坏来获取 root 权限。 关于 DirtyClone DirtyClone CVE-2026-43503 是 Dirty 家族的第四个成员(DirtyPipe → DirtyFrag → DirtyClone)。 它滥用了在使用带有 ESP-in-UDP 的 TEE netfilter 目标时...

8.8CVSS6.8AI score0.01987EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-89487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message users...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/11 8:19 p.m.•15 views

AZL-100568 CVE-2026-89487 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/11 8:19 p.m.•17 views

UBUNTU-CVE-2026-89487

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/11 7:43 p.m.•14 views

CVE-2026-89487 openvswitch: only skb_tx_error() a packet we are about to drop

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

7.8CVSS5.9AI score
SaveExploits0References11
EUVD
EUVD
•added 2026/09/11 7:43 p.m.•16 views

EUVD-2026-76393

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

5.9AI score0.00129EPSS
SaveExploits0References4
Rows per page
Query Builder