CVE-2026-31431-CopyFail-Lab

CVE-2026-31431「Copy Fail」— LinuxカーネルLPEラボ 概要 このリポジトリは、CVE-2026-31431（Copy Fail） の完全なラボ調査を文書化したものです。 これは、2026年4月29日に公開された、Linuxカーネルの algifaead 暗号モジュールにおける 高深刻度のローカル権限昇格（LPE）脆弱性です。 CVSSスコア: 7.8（高） テストカーネル: 6.18.12+kali-amd64 ラボ実施日: 2026年5月11日 内容 ファイル| 説明 ---|---...

copy-fail-CVE-2026-31431-IOC

copyfail-detect CVE-2026-31431"Copy Fail" 탐지 툴킷. 디스크의 파일을 변경하지 않고 페이지 캐시 데이터를 손상시키는 Linux 커널 로컬 권한 상승 기법입니다. 존재 이유 Copy Fail은 디스크의 파일이 수정되지 않기 때문에 기존 파일 무결성 모니터링을 우회할 수 있습니다. 이 저장소는 auditd, eBPF, 페이지 캐시 비교, Sigma 규칙 및 대응 문서를 사용한 계층적 탐지를 제공합니다. eBPF 모니터는 가장 정확도가 높은 탐지기입니다. AFALG 활동을 감시하고, authence...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

영향을 받는 소프트웨어: WinGUp 업데이터를 사용하는 8.8.9 이전 버전의 Notepad++ 취약점 유형: 임의 코드 실행으로 이어지는 업데이트 무결성 검증 우회 설명: WinGUp 업데이터는 업데이트 메타데이터의 무결성을 제대로 검증하지 못하므로, 업데이트 트래픽을 가로채거나 리디렉션할 수 있는 공격자가 사용자 권한으로 실행될 악성 설치 프로그램을 제공할 수 있습니다. 참고용으로 exploit.py중간자 프록시와 동료 플레이어를 위한 HTB-Friendly 버전DNS 스푸핑 시뮬레이션도 포함했습니다...

USN-8720-1: GnuPG vulnerability

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...

USN-8720-1 gnupg2 vulnerability

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...

PT-2026-85369

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...

EUVD-2026-61221

fastify vulnerable to schema validation bypass via root primitive coercion mismatch...

PostgreSQL 17.x < 17.11 / 18.x < 18.6 GSSAPI Improper Message Integrity Enforcement

The version of PostgreSQL installed on the remote host is 17 prior to 17.11 or 18 prior to 18.6. As such, it is potentially affected by a security bypass vulnerability: - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.con...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

CVE-2026-80675 libbpf: Reject non-exclusive metadata maps in the signed loader

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2026-81717

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

EUVD-2026-67067

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81717

openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in its portable USB drive feature, whose threat model assumes an attacker with physical write access to the drive. First, USBDriveCreator._verify_integrity_file validates only files listed in the manifest, so an at...

CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81717 openssl_encrypt before 1.4.9 Integrity Bypass via Added Files

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

golang security update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

golang security update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RLSA-2026:22112 Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum...

RockyLinux 10 : golang (RLSA-2026:22120)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22120 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...