9714 matches found
OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode
A flaw was found in OpenSSH. When the scp command is used by a root user to download a file with the legacy protocol option -O and without preserving original file permissions -p, the downloaded file can be installed with elevated privileges setuid or setgid. This unexpected behavior could allow ...
Exploit for CVE-2026-31431
CVE-2026-31431 - Script de Verificacao e Mitigacao Este repos...
Exploit for CVE-2026-31431
copy-fail-blocker BPF-LSM mitigation for CVE-2026-31431htt...
Exploit for CVE-2026-31431
Copy Fail - Defense-in-Depth Primitives for CVE-2026-31431 Ke...
Exploit for CVE-2026-31431
copyfail-rs A Rust implementation of the Copy Fail exploi...
JLSEC-2026-362
SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP file...
Exploit for CVE-2026-31431
Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: T...
CLSA-2026-1777556512 Fix CVE(s): CVE-2026-35385
SECURITY UPDATE: setuid/setgid bits preserved on scp downloads without -p - debian/patches/CVE-2026-35385.patch: in legacy -O mode, OR 07000 into the saved umask in sink in scp.c so that setuid/setgid/sticky bits are stripped from received files when -p is not specified. - CVE-2026-35385...
Exploit for CVE-2026-31431
Copy Fail - CVE-2026-31431 Detector and Mitigator !Bashhtt...
CLSA-2026-1777547626 openssh: Fix of CVE-2026-35385
CVE-2026-35385: clear setuid/setgid bits when downloading files as root in scp legacy -O mode without the -p flag...
Exploit for CVE-2026-31431
copy-fail-cve-2026-31431 Passive detection tooling and techni...
Exploit for CVE-2026-31431
CVE-2026-31431 — "Copy Fail" Local Privilege Escalation in th...
CLSA-2026-1777545655 vim: Fix of 10 CVEs
CVE-2021-3928: in suggesttriewalk only credit a non-word-char boundary with SCORENONWORD when preword is non-empty, so spell suggestions do not read uninitialized memory behind preword. - CVE-2021-3974: in nfaregmatch NFAMARK / NFAMARKGT / NFAMARKLT, save reginput - regline and re-fetch regline...
CVE-2026-31786
In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISORxenversionXENVERbuildid is neither NUL terminated nor a string. The first causes a buffer overflow as sprintf in buildidshow will read and copy ti...
Exploit for CVE-2026-31431
Wazuh SCA policy: Copy Fail CVE-2026-31431 This policy file...
CLSA-2026-1777542837 Fix CVE(s): CVE-2026-35385
SECURITY UPDATE: scp setuid/setgid bit handling - debian/patches/CVE-2026-35385.patch: when downloading files as root in legacy -O mode and without the -p preserve modes flag, mask out setuid/setgid bits in scp1 sink. - CVE-2026-35385...
Exploit for CVE-2026-31431
CVE-2026-31431 Copy Fail Detection Toolkit Detection and an...
New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions
Cybersecurity researchers have disclosed details of a Linux local privilege escalation LPE flaw that could allow an unprivileged local user to obtain root. The high-severity vulnerability tracked as CVE-2026-31431 CVSS score: 7.8 has been codenamed Copy Fail by Xint.io and Theori. "An unprivilege...