3388 matches found
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 β Copy Fail Linux kernel local privilege esc...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
This is a public Proof-of-Concept PoC for CVE-2026-31431 "Cop...
CLSA-2026-1777586245 Fix CVE(s): CVE-2026-35385
SECURITY UPDATE: scp1 downloading as root in legacy mode without -p did not clear setuid/setgid bits on downloaded files. - debian/patches/CVE-2026-35385.patch: clear setuid/setgid bits from umask in sink when -p is not set - CVE-2026-35385...
Exploit for CVE-2026-31431
CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script Dete...
CLSA-2026-1777567965 openssh: Fix of CVE-2026-35385
CVE-2026-35385: when downloading files as root in legacy -O mode and without the -p preserve modes flag, scp1 did not clear setuid/setgid bits from downloaded files. Backport upstream commit 487e8ac1 to mask out the setuid/setgid bits in this case...
CLSA-2026-1777567687 Fix CVE(s): CVE-2026-35385
SECURITY UPDATE: scp setuid/setgid bit handling - debian/patches/CVE-2026-35385.patch: when downloading files as root in legacy -O mode and without the -p preserve modes flag, mask out setuid/setgid bits in scp1 sink. - CVE-2026-35385...
Exploit for CVE-2026-31431
Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vuln...
Exploit for CVE-2026-31431
Copy-Fail-CVE-2026-31431 A proof-of-concept exploit reprodu...
Exploit for CVE-2026-31431
copyFail.py β CVE Exploit Analysis Report Summary copyFa...
CLSA-2026-1777556512 Fix CVE(s): CVE-2026-35385
SECURITY UPDATE: setuid/setgid bits preserved on scp downloads without -p - debian/patches/CVE-2026-35385.patch: in legacy -O mode, OR 07000 into the saved umask in sink in scp.c so that setuid/setgid/sticky bits are stripped from received files when -p is not specified. - CVE-2026-35385...
CLSA-2026-1777547626 openssh: Fix of CVE-2026-35385
CVE-2026-35385: clear setuid/setgid bits when downloading files as root in scp legacy -O mode without the -p flag...
CLSA-2026-1777546896 openssh: Fix of CVE-2026-35385
CVE-2026-35385: when downloading files as root in legacy -O mode and without the -p preserve modes flag, scp1 did not clear setuid/setgid bits from downloaded files. Backport upstream commit 487e8ac1 to mask out the setuid/setgid bits in this case...
Exploit for CVE-2026-31431
CVE-2026-31431 Copy Fail Exploit A Linux kernel page cache co...
CLSA-2026-1777542837 Fix CVE(s): CVE-2026-35385
SECURITY UPDATE: scp setuid/setgid bit handling - debian/patches/CVE-2026-35385.patch: when downloading files as root in legacy -O mode and without the -p preserve modes flag, mask out setuid/setgid bits in scp1 sink. - CVE-2026-35385...
Exploit for CVE-2026-31431
CVE-2026-31431 Copy Fail Detection Toolkit Detection and an...
New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions
Cybersecurity researchers have disclosed details of a Linux local privilege escalation LPE flaw that could allow an unprivileged local user to obtain root. The high-severity vulnerability tracked as CVE-2026-31431 CVSS score: 7.8 has been codenamed Copy Fail by Xint.io and Theori. "An unprivilege...
CVE-2026-39457
When exchanging data over a socket, libnv uses select2 to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select2's file descriptor set size limit of FDSETSIZE 1024. An attacker who is able to force a libnv application to allocate large file...
EUVD-2026-26356
When exchanging data over a socket, libnv uses select2 to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select2's file descriptor set size limit of FDSETSIZE 1024. An attacker who is able to force a libnv application to allocate large file...