postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

cPanel-Fix

Asistente de seguridad para cPanel y kernel Un único security-remediation.sh para CVE-2026-41940 cPanel, CVE-2026-31431 kernel "Copy Fail", CSF, limpieza opcional de dominios/proxy y endurecimiento opcional del operador. Mantenedor: Aria Jahangiri Far Clonar git clone...

CVE-2025-27893

CVE-2025-27893: Control Externo de Parámetro Web Asumido como Inmutable en Archer Platform Descripción En Archer Platform 6 hasta 6.14.00202.10024, un usuario autenticado con privilegios de creación de registros puede manipular campos inmutables, como la fecha de creación, interceptando y...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

Important: Red Hat Security Advisory: postgresql16 security update

An update for postgresql16 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

copyfail-alpine

这是Copy Fail LPE CVE-2026-31431的一个更精简的移植版本，它修补了/etc/passwd的前几个字节，使得通过su切换到root不需要密码。这减小了原始漏洞利用的总体积并使其更具可移植性。像Alpine这样的发行版使用busybox/musl而不是独立的su二进制文件和glibc链接，因此原始的二进制修补方法通常不起作用。我特别想制作一个能在Alpine上运行的移植版本，但这种方法应该适用于任何存在漏洞的内核的发行版，与底层的coreutil格式和CPU架构无关，因为它依赖于修改一个更普遍的目标。（注意：此PoC不是容器逃逸）...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 Copy Fail Exploit precompilado para CVE-2026-31431 Copy Fail. Código fuente original de tgies/copy-fail-c, con el objetivo de compilación i386 x8632 añadido. Descubrimiento de la vulnerabilidad y PoC original por theori-io/copy-fail-CVE-2026-31431. Artículo canónico: copy.fail...

rootpacket-cve-2026-31431

rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojacking toolkit captured from live attacks on Kinryū Labs honeypots. It breaks in through an exposed Docker Engine API, escapes the container to root the host with CVE-2026-31431 , installs a kernel rootkit, and runs an XMRig Monero miner. Fu...

CVE-2026-31431

CVE-2026-31431 — Sitio de seguimiento de Copy Fail Fuente para el rastreador de estado de parches Copy Fail : un sitio de una sola página que registra qué distribuciones han publicado una corrección para la escalada de privilegios algifaead en el kernel de Linux. Dónde viven los datos Todo sobre ...

CVE-2015-3306

CVE-2015-3306 This contains single-file exploit for ProFTPd 1.3.5 modcopy CVE-2015-3306 vulnerability, especially for TryHackMe Kenobi Lab. Vulnerability Description CVE-2015-3306 is a vulnerability found in ProFTPd 1.3.5 due to a flaw in the modcopy module, which is responsible for enabling FTP...

Research-CVE-2016-5195

CVE-2016-5195Dirty Cow Cow es copy-on-write , presente en los kernels de Linux desde 2007 y descubierta en 2016. Como estoy haciendo un laboratorio relacionado con este CVE, aprovecharé para escribir un análisis sobre él. 1. Introducción Como el kernel se ejecuta con privilegios de root, puede...

Raccine

Raccine Una protección sencilla contra el ransomware Por qué Con frecuencia vemos ransomware que elimina todas las copias de sombra mediante vssadmin. ¿Y si pudiéramos interceptar esa petición y matar el proceso que la invoca? Intentemos crear una vacuna sencilla. Cómo funciona Registramos un...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Fuente original del CVE escrita por xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Reescrito para que el exploit pueda ejecutarse en 1 shell el exploit original requiere 2 shells. Compile make all Create mount point for fuse filesystem mkdir -p...

CVE-2026-51992

CVE-2026-51992 Dentro de ClickHouse, existe una funcionalidad que permite a un usuario con los permisos adecuados crear diccionarios para interactuar con diferentes bases de datos y ejecutar consultas específicas en ellas. Para PostgreSQL, las consultas SELECT se envuelven en una declaración COPY...

CVE-2016-5195

CVE-2016-5195: Dirty COW Linux Kernel Race Condition Defensive research, non-weaponized validation, and patch analysis for CVE-2016-5195 Dirty COW, a Linux kernel copy-on-write race condition that can allow a local user to modify data associated with a read-only mapping and gain elevated...

PoC-CVE-2026-46331

Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2026-46331, una vulnerabilidad de escalada de privilegios local en el kernel de Linux en el subsistema de control de tráfico. Resumen de la vulnerabilidad La falla se encuentra en la acción de edición de paquetes actpedit,...