packet_edit_meme

PACKETEDITMEME - aka CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF entry of setuid-root /bin/su with...

copy-fail-c

Copy Fail CVE-2026-31431 - Порт на C English en ∙ 日本語 ja ∙ 简体中文 zh-cn ∙ 한국어 ko ∙ Русский ru Кроссплатформенная реализация на C эксплойта Copy Fail для Linux CVE-2026-31431. Уязвимость была раскрыта 29 апреля 2026 года исследователями Theori / Xint. Полное описание уязвимости, хронологию и процесс...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection with Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering for the Dirty Frag kernel LPE - Ubuntu / RHEL / Debian / Amazon Linux What is Dirty Frag? CVE-2026-43284 / CVE-2026-43500 is a Linux kernel Local Privilege Escalation LPE that chains two independent...

CVE-2026-43284

Dirty Frag - критическая уязвимость ядра Linux - CVE-2026-43284 📚 Введение Цепочка эксплойтов, классифицируемая как локальное повышение привилегий LPE , позволяет непривилегированному пользователю получить root-доступ практически на всех современных дистрибутивах Linux, работающих на ядрах,...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive · 48 iterations · 192-byte ELF overwrite · unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain · Right: root shell...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" — исследовательский и пентестинговый инструмент ⚠️ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Этот проект предоставляется строго для: Исследований в области безопасности Образовательных целей Авторизованного тестирования на проникновение CTF и лабораторных сред Используя этот инструмент,...

CVE-2026-43284

Dirty Frag: Universal Linux LPE Abstract This document explains the Dirty Frag vulnerability class, discovered and reported by Hyunwoo Kim @v4bel. By chaining xfrm-ESP Page-Cache Write CVE-2026-43284 with RxRPC Page-Cache Write CVE-2026-43500, an attacker can escalate to root on major Linux...

rootpacket-cve-2026-31431

rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojacking toolkit captured from live attacks on Kinryū Labs honeypots. It breaks in through an exposed Docker Engine API, escapes the container to root the host with CVE-2026-31431 , installs a kernel rootkit, and runs an XMRig Monero miner. Fu...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

CVE-2026-53266

CVE-2026-53266 — Linux ebtables SNAT ARP-rewrite 페이지 캐시 쓰기 추적 사이트 CVE-2026-53266 패치 상태 추적기의 소스: Linux 커널의 netfilter 브리지 ebtables SNAT ARP-rewrite 페이지 캐시 쓰기2026-09-18부터 CISA KEV에 대한 수정을 배포한 배포판을 기록하는 단일 페이지 사이트입니다. 사실이 있는 곳 버그에 관한 모든 것 — CVE ID, 영향을 받는 버전과 수정된 버전, 업스트림 수정 커밋, 발견 및 공개 크레딧, 그리고 현재...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Dirty Frag — доказательство концепции локального повышения привилегий ⚡ 📖 Описание Этот репозиторий содержит доказательство концепции PoC для: CVE-2026-43284 — Dirty Frag Эксплойт демонстрирует уязвимость, затрагивающую уязвимые системы Linux. 🧠 О Dirty Frag Dirt...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Удалённо root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...

cve-2026-31431-checker

CVE-2026-31431 "Copy Fail" — Vulnerability Detection Script Shell-based scanner for CVE-2026-31431 "Copy Fail" , a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem algifaead / AFALG interface. An unprivileged local user can write 4 bytes into the in-memory pa...

PoC-CVE-2026-46331

This repository contains a proof-of-concept PoC exploit for CVE-2026-46331, a Linux kernel local privilege escalation vulnerability in the traffic-control subsystem. Vulnerability Summary The flaw exists in the actpedit packet-editing action, where the kernel may calculate the copy-on-write...

cve-2026-31431

CVE-2026-31431 — Linuxカーネル algifaead「Copy Fail」: 分析 CVE-2026-31431 （CVSS 3.1 7.8 HIGH 、 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H）に関するセキュリティ研究: AFALG AEADインターフェースチェーンにおける3つの合成可能な設計上の 欠陥が、決定的でレースフリーな4バイトのページキャッシュ書き込みを、 読み取り可能な任意のファイルの任意のオフセットに対して 引き起こします — ディスクコピーはクリーンなままなので、オンディスクチェックサムは何も検知しません。...

cve-2026-31431

CVE-2026-31431 — Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC — Demonstration Mitigation References Vulnerability Description...

CVE-2026-79713

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

EUVD-2026-82684

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

DirtyClone

DirtyClone DirtyClone is a diagnostic, proof-of-concept local privilege escalation tool written in C. It targets a kernel/XFRM-related exploit path described in the source as CVE-2026-43503 and is intended only for authorized security research in controlled environments. Overview This repository...