CVE-2021-44228

Log4Shell CVE-2021-44228 Mitigation Ansible Role This Ansible role deploys a Python-based script to programmatically mitigate the Log4Shell vulnerability CVE-2021-44228 by removing the vulnerable JndiLookup class from affected Log4j JAR files. It is designed to be run via Ansible, but you can als...

Bypass-PayloadRestrictions.dll-wdeg-rop-mitigation-

Bypass-PayloadRestrictions.dll-wdeg-rop-mitigation-...

ddos-reduction-system

FLOD System First Line Of Defense An adaptive two stage Layer 4 volumetric DDoS mitigation gateway. Author: Abdullah Armiyao Project: Adaptive Two Stage Framework for Near Real Time Layer 4 Volumetric DDoS Mitigation Using Behavioral Traffic Analysis What It Does Most DDoS mitigation uses fixed...

copy-fail-CVE-2026-31431-mitigation-ansible-playbook

CVE-2026-31431 Mitigation Playbook An Ansible playbook to apply and rollback the CVE-2026-31431 AFALG kernel module mitigation on both Debian/Ubuntu and RHEL/Rocky/AlmaLinux systems. Overview This playbook mitigates CVE-2026-31431 by disabling the vulnerable algifaead kernel module: Debian/Ubuntu...

copy-fail-check

copy-fail-check CVE-2026-31431 Helper based on https://copy.fail/ Copy Fail Quick Check Interactive bash helper to review basic exposure related to CVE-2026-31431 Copy Fail and apply a temporary mitigation based on algifaead. Target compatibility Mainly intended for: Debian / Ubuntu AlmaLinux /...

ansible-role-cve-2026-31431

ansible-role-cve-2026-31431 Ansible role to apply and later remove the modprobe.d mitigation for CVE-2026-31431 "Copy Fail" in the Linux kernel's AFALG / algifaead subsystem. Tested on Debian. Pull requests for other distributions, edge cases, or improvements are very welcome. What it does The ro...

CVE-2026-41940

CVE-2026-41940 ✅ Script analysis what the scanner does and how ✅ Root cause technical explanation the CRLF/Session.pm diff ✅ Prevention — patch commands, secure coding lessons ✅ Mitigation — firewall rules, WAF config, hardening ✅ IOC hunting — detecting if you were already hit ✅ VaPT methodology...

wg.copyfail.patch

CVE-2026-31431 aka Copy.Fail eBPF workaround Why it matters This CVE allows authorized user change cache copy of any readable file, which leads to Local Privilege Escalation aka local root exploit, sandbox/container escape and other issues. It works by creating AFALG socket that is provided by...

copy_fail_mitigation

copyfailmitigation 1. This script will attempt to mitigate the copyfail attack. CVE-2026-31431 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch Usage: 3. cd 4. chmod +x copyfailmitigation.sh 5. Recommended to run as root 6. ./copyfailmitigation.sh...

CVE-2026-31431-patch

CVE-2026-31431-patch A temporary mitigation for CVE-2026-31431 vulneribility git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh Once server is back from reboot execute below script: sh completeaead.sh...

copy.fail-mitigation-MLM

Create a new configuration channel State Channel in Multi-Linux Manager using the code from the copy-fail.sls file. Assign the config channel to all your machines and run it, or execute Highstate. This is a temporary fix!...

cve-2026-21509-mitigation

CVE-2026-21509 Mitigation Script Traditional Chinese version: READMEzh-TW.md Overview This script applies a registry-based mitigation to protect against CVE-2026-21509 Microsoft Office security feature bypass vulnerability, which has been exploited in the wild. CVE ID: CVE-2026-21509 Severity:...

copy-fail-mitigate-no-reboot

copy-fail-mitigate Minimal no-reboot mitigation helper for Copy Fail / CVE-2026-31431. This script disables the vulnerable algifaead module path and attempts to unload the module immediately. It also performs a best-effort page-cache eviction for /usr/bin/su. This is a mitigation, not a kernel fi...

KSK-ITDK-CVE-2026-21509-Mitigation

CVE-2026-21509-Mitigation Powershell script with Detection and Remediation for CVE-2026-21509...

CVE-2023-7028-Account-Take-Over-Gitlab

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

cve-2026-31431-mitigation

CVE-2026-31431 seccomp Mitigation A lightweight, reversible seccomp-based mitigation for CVE-2026-31431, a local privilege escalation vulnerability in the Linux kernel's algifaead / authencesn crypto subsystem. 中文文档 Vulnerability Overview Type: Local Privilege Escalation LPE Affected Component:...

CVE-2026-31431-mitigation

CVE-2026-31431-mitigation This repository holds the source code for our eBPF-based mitigation against CVE-2026-31431, also known as "copy.fail". More info available at https://copy.fail The motivation behind building this solution was to fulfill the need for a reboot-less mitigation for...

cve-2017-2636-el

cve-2017-2636-el This role installs the workaround documented on https://access.redhat.com/security/cve/CVE-2017-2636 to blacklist the nhdlc module from being loaded. Requirements This role only applies to Red Hat Enterprise Linux versions 6 and 7, and variants CentOS, CloudLinux, etc. License MI...

wordpress-skelersecurity-core-security-CVE-2026-63030

SkelerSecurity Core Security Plugin A focused, temporary mitigation for unauthenticated access to WordPress Core’s REST Batch API endpoint. Overview SkelerSecurity Core Security Plugin requires authentication before WordPress processes requests to the Core REST Batch API route: /wp-json/batch/v1...

patch-manual-CVE-2025-26465-e-CVE-2025-26466

🛡️ Manual Mitigation - OpenSSH CVE-2025-26465 & CVE-2025-26466 🔍 About the Script This script applies manual mitigations for security issues in OpenSSH , without the need for immediate update. 🚨 CVE-2025-26465 Removes VerifyHostKeyDNS to prevent SSH connection interception. 🚨 CVE-2025-26466 Adjust...