CVE-2026-31431

🚨 CVE-2026-31431: Copy Fail Uma falha crítica de 9 anos no kernel Linux que permite obter acesso root em segundos 📋 Resumo Executivo Atributo| Detalhes ---|--- CVE| CVE-2026-31431 Apelido| Copy Fail Tipo| Escalonamento de Privilégios Local LPE CVSS| 7.8 High Descoberto por| Theori Xint Code...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

تحليل ثغرة Copy Fail CVE-2026-31431 وممارسة الاستجابة لها هذا المشروع عبارة عن مشروع مصغّر لتحليل مبدأ عمل ثغرة Copy Fail CVE-2026-31431 في نواة Linux، ومقارنة الحالة قبل وبعد الترقيع باستخدام أداة الفحص غير المدمرة من مستودع PoC العام. لم يتم تنفيذ أي استغلال فعلي لتعديل ثنائيات setuid أو تعديل...

CVE-2025-57489

CVE-2025-57489 الوصف من مدونة المطوّر: عندما يتم فتح القفل في SuperDuper للسماح بالتنفيذ دون الحاجة إلى إدخال كلمة مرور المسؤول، يمكن لبرنامج خارجي استخدام تفويضنا لتشغيل شيء آخر غير النسخ الاحتياطي بصلاحيات المسؤول. وصف CVE: التحكم غير الصحيح في الوصول في مكوّن SDAgent الخاص بـ Shirt Pocket...

CVE-2021-4034

CVE-2021- Eine lokale Privilegienausnutzungsschwachstelle wurde im pkexec-Dienstprogramm von polkit gefunden. Die pkexec-Anwendung ist ein setuid-Tool, das nicht privilegierten Benutzern erlaubt, Befehle als privilegierte Benutzer gemäß vordefinierter Richtlinien auszuführen. Die aktuelle Version...

CVE-2021-4034

Tesina CVE-2021-4034 PwnKit Questo repository contiene i materiali, gli esempi di codice e la documentazione per la tesina nell'ambito del modulo opzionale Sicurezza Informatica Applicata sulla vulnerabilità CVE-2021-4034 , nota anche come PwnKit. Riassunto La presente tesina nell'ambito del modu...

CVE-2021-4034-POC

CREDITS AUTORE DELLA VULNERABILITÀ: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Riferimento https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c...

CVE-2026-58089

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2026-58089

FreeBSD 's hwpmc(4) driver (hardware performance monitoring counters) contains a logic flaw in its handling of execve(2) credential transitions. An inverted check meant that PMCs owned by unprivileged processes were not detached when a target process executed a setuid or setgid binary, allowing a...

EUVD-2026-66234

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

Linux Distros Unpatched Vulnerability : CVE-2026-79783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set...

PT-2026-81927

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2026-79783

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid...

CVE-2026-79783

rclone before 1.74.4 contains a privilege escalation vulnerability in its local backend . The root cause is a failure to mask special permission bits (setuid/setgid) when applying source-supplied mode metadata. An attacker who controls a remote source can plant a setuid binary by copying files wi...

CVE-2026-79783 rclone before 1.74.4 Privilege Escalation via setuid Metadata

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid...

EUVD-2026-65541

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid...

CVE-2026-79783 rclone before 1.74.4 Privilege Escalation via setuid Metadata

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid...

ctf

Cose relative al CTF Indice Le sfide sono collegate nella tabella seguente. Descrizione| Evento/Gioco| Soluzione ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| Un eseguibile con una funzionalità di "login" con la password in testo semplice nella memoria. Blackbox| Level 2| Un eseguibile...

Vulnerable-Docker-Engine

CVE-2021-41091 Questo exploit offre un'analisi approfondita della vulnerabilità di sicurezza CVE-2021-41091 e fornisce una guida passo-passo su come utilizzare lo script di exploit per ottenere un'escalation dei privilegi su un host. Riepilogo della vulnerabilità CVE-2021-41091 è un difetto in Mo...

FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions

Problem Description: When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. Impact: An unprivileged local user who has attached PMCs to a process can...