CVE-2026-87926

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

PT-2026-89409

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

ROS-20260910-73-0153

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

PT-2026-89410

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

ubuntu-cve-2026-31431-mitigation

Complete Guide to Updating the Kernel and kmod in Ubuntu to Fix Security Vulnerabilities CVE CVE-2026-31431 This vulnerability, also known as Copy Fail, is a logic bug in the Linux kernel that occurs in the AFALG / algifaead path. According to the discloser, an unprivileged local user can cause t...

CVE-2026-87926

CVE-2026-87926 affects the Rizwan17 inventory-management-system (GitHub project), up to commit bfe78a330d01bb26b9daec5dc9ecd5c77900e03f . The vulnerability is a cross-site scripting (XSS) flaw in the Login Page component, specifically in the file index.php . Manipulation of the msg argument allow...

CVE-2026-31431

🚨 CVE-2026-31431: Copy Fail A critical 9-year-old flaw in the Linux kernel that allows obtaining root access in seconds 📋 Executive Summary Attribute| Details ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail Type| Local Privilege Escalation LPE CVSS| 7.8 High Discovered by| Theori Xint Code...

CVE-2026-31431-Report-Copy-fail-Vulnerability-

CVE-2026-31431 — Copy Fail: Linux Kernel Privilege Escalation Educational analysis of the Copy Fail vulnerability in the Linux kernel. Covers the memory corruption mechanism, privilege escalation flow, container escape, and defensive countermeasures. ⚠️ Disclaimer This repository is for educationa...

CVE-2026-31431-Checker-Mitigator

CVE-2026-31431 Checker & Mitigator A simple, safe vulnerability scanner and mitigation tool for CVE-2026-31431 aka "Copy Fail", a local privilege escalation vulnerability in the Linux kernel's AFALG cryptographic interface. Note - It is fully vibe coded Script About the Vulnerability CVE :...

CVE-2026-31431-poc

Copy Fail Command PoC Wrapper A small modified proof-of-concept wrapper for Copy Fail / CVE-2026-31431 that allows passing a custom command from the terminal instead of always launching an interactive root shell so it can be ran in an none interactive environment such as a web shell. This project...

Weekly-Breach-Investigation--006

Copy Fail Vulnerability CVE-2026-31431 Summary High-severity local privilege escalation flaw in the Linux kernel, allowing unprivileged users to gain root access by corrupting the in-memory page cache. Impacts Linux distributions since 2017 and poses serious risks to cloud and containerized...

CVE-2026-31282

CVE-2026-31282 Descripción Totara LMS es vulnerable a un Control de Acceso Incorrecto. El código de la página de inicio de sesión puede manipularse para revelar el formulario de inicio de sesión y omitir el inicio de sesión de Octa. Un atacante puede encadenar esto con la falta de limitación de...

CVE-2026-31431-Verificador-Exploit

CVE-2026-31431 - Linux Kernel Privilege Escalation Exploit Description Functional exploit for the CVE-2026-31431 vulnerability that allows local privilege escalation on Linux systems by exploiting a flaw in the kernel's AFALG cryptographic subsystem combined with the splice system call. Features...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...

Copy-Fail

CVE-2026-31431 – "Copy Fail" Reachability Checker A simple, safe Python script that determines whether a Linux system is vulnerable to CVE-2026-31431 "Copy Fail", a local privilege escalation that affects all major distributions since kernel 4.14. ⚠️ What is Copy Fail? CVE-2026-31431 is a...

CVE-2026-31431-REVSHELL

root@kitploit: █▀▀ ▄▀█ █ █ █▀█ █▀█ █▀█ ▀█▀ █▀░ █▀█ █ █▄▄ █▀▄ █▄█ █▄█ ░█░ CVE-2026-31431 • Linux Kernel LPE → Root Reverse Shell Overview FailRoot is a weaponized exploit for CVE-2026-31431 — an out-of-bounds write in the Linux kernel's crypto: algifaead subsystem. It chains a privilege escalation...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vulnerability Overview Vulnerability Name: Copy Fail CVE Identifier: CVE-2026-31431 Discovered By / Authors: Xint Code Research Team building upon initial foundational research by Theori researcher Taeyang Lee. "Copy Fail" is a critical logic...

CVE-2025-59424

CVE-2025-59424 LinkAce Cross-Site Scripting Almacenado XSS en la página /system/audit...

linux-copy-fail-CVE-2026-31431

Análisis de Copy-Fail en Linux CVE-2026-31431 🛡️ Este repositorio contiene un análisis en profundidad, una Prueba de Concepto PoC y los resultados de pruebas de laboratorio para la vulnerabilidad CVE-2026-31431, conocida popularmente como "Copy-Fail". Copy-Fail explota una falla lógica en la API d...