Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes 容器逃逸 PoC 一个概念验证（PoC），演示了完全无特权的容器 如何通过共享容器镜像层利用 CVE-2026-31431 Linux 内核页缓存损坏漏洞，在 Kubernetes 上实现节点级代码执行 。 核心攻击原语是：任何与攻击者控制的容器共享镜像层的特权 DaemonSet 都可被武器化，用于容器逃逸 。本 PoC 以 kube-proxy 作为具体示例，但该技术可推广到集群中的任何特权工作负载。 已在阿里云 ACK 、Amazon EKS 和 Google GKE 上验证——一个无特权 Pod 通过特权...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

layerleak

layerleak Layerleak は読み取り専用の OCI イメージシークレットスキャナーです。Docker デーモンを使用せずに公開イメージ参照を解決し、ダウンロードしたコンテンツを OCI ダイジェストと照合して検証し、レイヤーの状態を再構築し、削除されたアーティファクトとイメージメタデータを検査し、秘匿化された来歴情報に富む検出結果を返します。 Docker Hub、GHCR、Quay、GCR、MCR、Amazon ECR Public、およびその他の OCI 互換レジストリをサポートしています。結果は JSON として保存でき、同梱の API 用に PostgreSQL...

gitlab-profile

テストステータス : ↳ コアオーケストレーターテスター ↳ ドキュメンテーションテスター 作成日: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ このプロジェクトはベータ版です！ 🎉 はい！ベータ版がまもなく完成することをお知らせいたします！バージョン0.153から、最初のV1リリースプロセスに向けたすべてのテストが開始されています！ ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ ░░█▀▀░▀█▀░█▀█░█░█░▀█▀░█▀▀░░░░░░░░░░░░░░...

Good Layers LMS Plugin <= 2.1.4 - SQL Injection

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

http2-security-lab

🦣 TuskMads HTTP/2 安全实验室 一个从头开始构建、纯 Python 编写的 HTTP/2 攻击模拟与防御实验室。 功能说明 模拟针对脆弱服务器的 3 种真实 HTTP/2 攻击，然后展示加固服务器上的 5 层防御如何全部阻止这 3 种攻击。 实现的攻击 攻击| 技术| 影响 ---|---|--- Slowloris| 打开流，从不发送 ENDSTREAM| RAM 耗尽 Rapid Reset| RSTSTREAM 洪泛（CVE-2023-44487）| CPU 耗尽 HPACK Bomb| 每个请求 300+ 个头部| 内存分配攻击 实现的防御 防御| 方法...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes 容器逃逸 PoC 一个概念验证，演示完全无特权容器 如何通过共享容器镜像层利用 CVE-2026-31431 Linux 内核页缓存损坏漏洞，在 Kubernetes 上实现节点级代码执行 。 免责声明： 本仓库仅用于教育和防御目的。请仅在您拥有或已获得明确授权测试的系统上使用。 背景 CVE-2026-31431（"Copy Fail"）是 Linux 内核页缓存写时复制（CoW）路径中的一个漏洞。AFALG splice 竞态条件允许无特权进程损坏只读...

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

CVE-2026-71177

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges and Session theft . Rem...

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

EUVD-2026-85328

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

CVE-2026-71177: Improper Restriction of Rendered UI Layers or Frames

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

PT-2026-97331

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Improper Restriction of Rendered UI Layers or Frames issue exists where a low privileged attacker with remote access could potentially exploit the flaw ...

CVE-2026-84388

An improper restriction of rendered UI layers or frames vulnerability in Fortinet FortiPAM Chrome Extension (versions 8.0 and 7.4 , all versions) allows a remote, unauthenticated attacker to achieve information disclosure and compromise the confidentiality and integrity of protected data. Accordi...

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-55617: Insufficient Session Expiration

Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Returns the firmware result upon destroying QP/RQ. Previously, when destroying a QP/RQ, the result of the firmware destruction function was ignored, and the upper layers were not informed of the failure. This could...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow before version 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a denial-of-service attack on Image.open prior to Image.load...

ROS-20260908-73-0035

The vulnerability in Golang-X-Net is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...