2256 matches found
copy-fail-CVE-2026-31431
Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...
finalrun-agent
finalrun.app • Docs • Blog • Cloud Device Waitlist • Join Slack Community Follow us on finalrun-agent is an AI-driven CLI that tests your Android and iOS apps using natural language. You write a plain-English test in YAML, FinalRun launches your app on an emulator or simulator, uses an AI model...
scopeblind-gateway
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...
copy-fail-CVE-2026-31431
Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...
CVE-2026-86259
CVE-2026-86259 - OpenMAIC 1.0.0: SSRF saliente no autenticada al servicio de metadatos en la nube mediante middleware fail-open y omisión de validación condicionada por el entorno Descripción general Verificado. Existe una cadena de explotación de dos tramos en el middleware de autenticación de...
clawdstrike
Clawdstrike EDR for the age of the swarm. Fail closed. Sign the truth. Status: pre-1.0 beta. Public APIs are stable; defaults may still tighten before 1.0. Clawdstrike is a policy engine, an EDR, and a signed audit chain in one binary. An AI agent's toolcall sits in the same event taxonomy as a...
Dolibarr <=22.0.4 - Local File Inclusion
Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...
CVE-2026-34486
CVE-2026-34486 Bypass de fail-open en EncryptInterceptor en el clustering de Apache Tomcat Tribes que conduce a RCE no autenticado mediante deserialización de Java. Afecta: 11.0.19+, 10.1.53+, 9.0.116+. Corregido en: 11.0.21, 10.1.54, 9.0.117. Encontrado y reportado por Bartlomiej Dmitruk...
copy-fail-CVE-2026-31431-detection-probe
Suite de Sondas LPE del Kernel de Linux — Copy Fail y Dirty Frag Herramientas de detección seguras para dos familias de vulnerabilidades relacionadas de escalada de privilegios local del kernel de Linux — Copy Fail CVE-2026-31431 y Dirty Frag CVE-2026-43284 / CVE-2026-43500 — ambas afectan a toda...
vcheck
vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...
CVE-2026-70376
CVE-2026-70376 — CSRF en todo el sitio de Pluck CMS → RCE Comprobación de Referer fail-open + sin tokens CSRF + subida de doble extensión Una sola visita de un administrador a una página elimina contenido, inyecta páginas y suelta un webshell De un vistazo · Resumen · Causa raíz · Cadena de ataqu...
ams-failopen
Firma Fail-Open en AppleMediaServices Divulgación de Zero-Day Resumen Este problema constituye una vulnerabilidad Zero-Day activa y refleja un defecto de diseño sistémico en AppleMediaServices.framework, más que una regresión o un error específico de una versión. Una falla crítica de tipo fail-op...
mks-copy-fail-mitigation
Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...
Linux-Kernel-Copy-Fail-CVE-2026-31431-
Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...
copyfail2_electric_boogaloo_fix
copyfail2electricboogaloofix Una mitigación temporal contra la variante copyfail copyfail2electricboogaloo: LPE de Linux sin privilegios mediante la ruta rápida no-COW MSGSPLICEPAGES de xfrm ESP-in-UDP. Escritura en la caché de páginas dentro de cualquier archivo legible. Sobrescribe una línea...
linux-kernel-algif-aead-checker
CVE-2026-31431 / Copy Fail Checker 🔒 Linux kernel vulnerability checker for the algifaead-based Copy Fail attack path. Detects if your system is vulnerable and provides mitigation steps. Features Kernel version vulnerability range detection AFALG crypto module check Protection status KPTI, SELinu...
CVE-2026-31431
CVE-2026-31431 Copy Fail Local Privilege Escalation Copy Fail is a new Linux kernel zero-day that allows any authenticated user to gain root privileges Local Privilege Escalation, or LPE on almost every Linux distribution since 2017. An easy-to-use exploit is already public. Vulnerable list of...
copy-fail-checker
Copy Fail Checker — CVE-2026-31431 A small, dependency-light Bash script that tells you whether your Linux system is exposed to the Copy Fail local privilege-escalation vulnerability CVE-2026-31431. The script is read-only : it never exploits the bug, never loads kernel modules, and never modifie...
SSLPatch
SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...
