copyfail-rs

copyfail-rs 针对 CVE-2026-31431（CopyFail）的多向量 PoC + 配套检测工具。 包含一个其他公开 PoC 均未提供的全新 PAM 认证绕过向量。 检测模式可捕获 AIDE / Wazuh / OSSEC / Tripwire 在结构上无法发现的问题。 单一静态二进制文件。约 108 KB。nostd musl。 演示 root@kitploit: noot@host:$ ./copyfail-rs --mode exploit sudo password for noot: root@host: id uid=0root gid=0root...

copyfail-rs

copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo root@kitploit:...

dev.dsf:dsf-bpe-process-api-v1 (>=1.0.0-m1, <=1.9.0), dev.dsf:dsf-bpe-server (>=1.0.0-m1, <=1.9.0) +10 more potentially affected by CVE-2026-40939 via dev.dsf:dsf-common-auth (>=1.0.0, <=1.9.0)

dev.dsf:dsf-common-auth MAVEN version =1.0.0, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.2.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540566...

MAL-2025-15623 Malicious code in betlab-common-auth (npm)

The package betlab-common-auth was found to contain malicious code...

Malicious code in betlab-common-auth (npm)

The package betlab-common-auth was found to contain malicious code...