CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes to Root on Every Major Linux Distribution CVE-2026-31431 Copy Fail is a logic bug in the Linux kernel's authencesn cryptographic template. It allows an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any...

CopyFail-for-dummies

Copy Fail / CVE-2026-31431 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Copy Fail and tracked as CVE-2026-31431. The purpose of this material is: to explain the bug mechanism at a...

CVE-2026-31431

📌 CVE-2026-31431 – Privilege Escalation via AEAD Crypto Socket Misuse 🧠 Overview CVE-2026-31431 is a Linux privilege escalation vulnerability that abuses the AFALG kernel crypto API interface. By crafting a malicious interaction with AEAD Authenticated Encryption with Associated Data sockets, an...

Copy-Fail-CVE-2026-31431-modernized

Copy-Fail-CVE-2026-31431-modernized A modernized version of Copy Fail PE How to use it: Just clone the repository and run the Poc.py : Educational purpose This proof of concept is only for educational purpose Inspired by : Main Exploit by theori-io...

copy-fail-go

copy-fail-go Go port of grenkoca's Python PoC for CVE-2026-31431 copy-fail. This version compiles to a fully static binary with zero runtime dependencies - no Python, no pip, no libc version constraints. Drop it on any Linux target and run it. It also automatically enumerates all SUID...

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms Fix A drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro ≤ 3.8.1 to mitigate Remote Code Execution CVE-2026-39440, CVSS 9.9. The Vulnerability Field| Value ---|--- CVE ID| CVE-2026-39440 CVSS Score| 9.9 Critical Affected|...

copy-fail-CVE-2026-31431-Python-Golfing

This repository does not have a README...

copy-fail-CVE-2026-31431

Vulnerability Description Root Cause In 2017, the Linux kernel crypto module authencesn introduced an in-place optimization for AEAD Authenticated Encryption with Associated Data operations. This optimization caused read-only pages in the page cache to be incorrectly placed into a writable...

agentic-dm-gateway — Updated!

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

wg.copyfail.patch

CVE-2026-31431 aka Copy.Fail eBPF workaround Why it matters This CVE allows authorized user change cache copy of any readable file, which leads to Local Privilege Escalation aka local root exploit, sandbox/container escape and other issues. It works by creating AFALG socket that is provided by...

copy-fail

Copy Fail PoC Proof of concept for CVE=2026-31431 These scripts elevate any regular user to root. Works on most Linux distros and CPUs. Technical writeup at https://copy.fail...

copy-fail-CVE-2026-31431

reference: https://xint.io/blog/copy-fail-linux-distributionsthe-demo-5...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

cve-2026-31431

CVE-2026-31431 Copy Fail Test This repository contains a workflow file for GitHub Actions to test whether the action runner is affected by CVE-2026-31431. You can do the test by yourself, just create a repository by this template and trigger the test.yml workflow manually remember to change the o...

CVE-2026-48908-by-yora

🔐 CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder — Unauthenticated File Upload / Potential RCE Developed byyora 📌 About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...

CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit POC 1. Run the exploit script and specify the target root@kitploit: python3 exploit.py --target https://example.com:2087/ 2. Capture session and replay in Burp Suite Copy the whostmgrsession value generated by the script Open the target URL in Burp Suite’s browser Replace...

DShield-SIEM

DShield Sensor Log Collection with Elasticsearch Introduction This is fork and a significant update from the initial publication on the ISC Storm Center website by Scott Jensen as a BACS paper and the scripts published in Github. https://github.com/fkadriver/Dshield-ELK...

cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 is a critical remote code execution RCE vulnerability affecting Atlassian's Confluence Server and Data Center. This vulnerability has a CVSS score of 8.3, placing it in the high-severity category. Attackers can exploit this vulnerability to execute remote code by...

copyfail

Aperçu Copy Fail CVE-2026-31431 est une vulnérabilité logique dans le noyau Linux permettant à un utilisateur local non privilégié d'élever ses privilèges jusqu'au niveau superutilisateur root. La vulnérabilité appartient à la classe Local Privilege Escalation LPE , ne nécessite pas de conditions...

CVE-2026-33701-Unsafe-Deserialization-in-OpenTelemetry-Java-Agent-RMI-Instrumentation

CVE-2026-33701 — Unsafe Deserialization in OpenTelemetry Java Agent RMI Instrumentation Severity: Critical CVSS v4.0: 9.3 Affected versions: opentelemetry-javaagent 2.26.1 Patched in: 2.26.1 released March 23, 2026 Overview OpenTelemetry is probably the most widely adopted observability framework...