CVE-2023-0386_POC

チーム CVE-MD このリポジトリはCVE-2023-0386の概念実証を提供します： https://nvd.nist.gov/vuln/detail/CVE-2023-0386 チームメンバー：Bǎnicǎ Dragoș-Marius と Borsos Matheas-Roland こちらが動画です： https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Linux OverlayFS ローカル特権昇格 PoC 概要 このリポジトリは、CVE-2023-0386...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777883924)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777883924 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams...

The vulnerability of Dissector ISO 15765 and ISO 10681 analyzers in Wireshark, a computer network traffic analyzer, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the ISO 15765 and ISO 10681 discrivers of the Wireshark network traffic analyzer is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker operating remotely to compromise the integrity and accessibility of...

OnlyOffice-path-traversal

ONLYOFFICE 路径遍历漏洞利用 CVE-2023-46988 📌 概述 该脚本利用了 ONLYOFFICE Document Server 中的一个路径遍历漏洞 （CVE-2023-46988 ），该漏洞允许未经授权的用户从服务器复制任意文件 。该漏洞存在于 /example/editor 端点，其中 fileExt 参数可以被操纵以访问敏感的系统文件和配置文件。 ⚠️ 免责声明 此工具仅用于教育和授权的安全研究目的 。 未经明确许可 对系统进行未授权使用是非法且不道德的。 🛠 功能 获取默认敏感文件 ： /etc/passwd...

CVE-2026-97612

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS networking subsystem. When all labels are removed from an encapsulated packet, the kernel fails to clear internal protocol tracking metadata, leaving stale network header references. An attacker could exploit this flaw by...

mks-copy-fail-mitigation

Copy Fail 缓解 DaemonSet 用于在 MKS 集群的所有 worker 节点上修复 Copy Fail 系列漏洞的 DaemonSet。 目录 CVE-2026-31431 Copy Fail CVE-2026-43284、CVE-2026-43500、CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail 漏洞描述 CVE ID： CVE-2026-31431 CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2026-31431 攻击向量及 CVSS v.3.1 危险等级： 得分：7.8 HI...

CVE-2026-71897

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy FailCVE-2026-31431脆弱性分析及び対応実習 本プロジェクトは、Linux Kernel Copy FailCVE-2026-31431脆弱性の動作原理を分析し、公開PoCリポジトリの非破壊的checker を用いてパッチ前後の状態を比較したミニプロジェクトです。 実際のsetuidバイナリ改ざんや/etc/passwd改ざんexploitは実行せず、一時testfileベースの安全な脆弱性有無確認と、検知/緩和の観点からの分析に焦点を当てています。 1. プロジェクトの目的...

firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component...

EUVD-2026-88819

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

CVE-2026-71897 Apache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpoints

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

CVE-2026-71897

Apache DolphinScheduler versions prior to 3.4.3 are vulnerable to an improper authorization check within the batch-copy and batch-move endpoints. An authenticated user can exploit this flaw to operate on workflows in projects for which they lack the necessary permissions, potentially allowing the...

CVE-2026-71897 Apache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpoints

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix 针对 copyfail 变种（copyfail2electricboogaloo）的临时缓解措施——无特权 Linux LPE，通过 xfrm ESP-in-UDP MSGSPLICEPAGES no-COW 快速路径实现。将数据写入任意可读文件的页面缓存中。将 /etc/passwd 中的 nologin 行覆盖为 sick::0:0:…:/:/bin/bash 并 su 进去。与 Copy Fail（CVE-2026-31431）属于同一类，但子系统不同。 重要提示： 在 /etc/modprobe.d...

CVE-2026-97149

A flaw was found in OpenStack Swift's tempurl middleware. A TempURL is a signed, time-limited link that should allow access to only one object. The signature does not cover extra request headers, and Swift did not block the X-Copy-From header on these signed upload requests. An attacker who alrea...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC...

linux-kernel-algif-aead-checker

CVE-2026-31431 / Copy Fail Checker 🔒 Comprobador de vulnerabilidades del kernel de Linux para la ruta de ataque Copy Fail basada en algifaead. Detecta si tu sistema es vulnerable y proporciona pasos de mitigación. Características Detección del rango de versiones vulnerables del kernel Verificació...

vcheck

vcheck SSH経由でリモートLinuxホストを監査し、Copy FailおよびDirty Fragカーネルモジュールの脆弱性を確認し、必要に応じて緩和策を適用します。 CVE| 名前| 影響を受けるモジュール ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser CVE-2026-43500| Dirty Frag RxRPC| rxrpc, kafs...

CVE-2026-31431

CVE-2026-31431 Copy Fail（ローカル権限昇格） Copy Fail は、2017年以降のほぼすべてのLinuxディストリビューションにおいて、認証されたユーザーがroot権限を取得できる（ローカル権限昇格、LPE）新たなLinuxカーネルゼロデイです。使いやすいエクスプロイトはすでに公開されています。 脆弱なLinuxとPythonのリスト 143 144 Linux: Linux xxxx 5.4.0-104-generic 118-Ubuntu SMP Wed Mar 2 19:02:41 UTC 2022 x8664 x8664 x8664 GNU/Linux...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 LinuxカーネルにおけるRDS + iouring ページキャッシュオーバーライトによるローカル権限昇格 📌 概要 PinTheft は、LinuxカーネルのReliable Datagram Sockets RDSサブシステムにおける参照カウントバグであるCVE-2026-43494 のための高度なローカルルートエクスプロイトです。 RDSのゼロコピーパスにおけるダブルフリーとiouringの固定バッファを組み合わせることで、このエクスプロイトはSUIDルートバイナリの信頼性の高いページキャッシュオーバーライト...