CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 root@kitploit: Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...

tetragon-dirtyfrag

tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...

CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...

COPY-FAIL

Copy Fail -- CVE-2026-31431 Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written...

CVE-2026-31431

CVE-2026-31431 — Local Privilege Escalation via AFALG 2026-04-29 — I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...

copyfail-rs

copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo root@kitploit:...

CVE-2022-1175

CVE-2022-1175 Gitlab Stored XSS, can be set in an issue on a project, either your own or another users. Allows attacks such as creating & stealing a Personal Access Token PAT of anyone who visits an issue. PAT's can then provide full Gitlab API access as that user equivilent to a full account...

CVE-2024-48197

CVE-2024-48197 Reflected XSS in AudioCodes MP-202b Description Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface. Additional Information N/A Vulnerability Type Cross Site Scripting XSS Reflected...

pedrocruz2202.github.io

This repository does not have a README...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes to Root on Every Major Linux Distribution CVE-2026-31431 Copy Fail is a logic bug in the Linux kernel's authencesn cryptographic template. It allows an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any...

CVE-2026-31431-Copy-Fail-add-arm64

Vulnerability Overview Item| Content ---|--- CVE ID| CVE-2026-31431 Vulnerability Name| Copy Fail Vulnerability Type| Linux Kernel Local Privilege Escalation LPE CVSS 3.1 Score| 7.8 HIGH CWE| CWE-669: Incorrect Resource Transfer Between Spheres Affected Scope| All Linux kernels built between 2017...

cve-2026-31431

CVE-2026-31431 Copy Fail Toolkit This repository contains detectors and a PoC for the Linux algifaead / authencesn page-cache scratch-write vulnerability CVE-2026-31431. Disclosure article: https://xint.io/blog/copy-fail-linux-distributions Authorization Notice Only use this on hosts you own or...

copyfail-go

CopyFail Go Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw — it needs neither. The same 732-byte Python script static Go binary roots every Linux distribution shipped since 2017. A Go implementation of CVE-2026-31431. In case you need a...

CVE-2026-31431---Copy-Fail-PoC

Description This repository contains an analysis of CVE-2026-31431 Copy Fail in the Linux kernel. It targets local privilege escalation LPE through page cache manipulation. Legal Notice This project is for educational and testing purposes only. Any unauthorized use is the sole responsibility of t...

CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 Copy Fail CVE-2026-31431 – Local Privilege Escalation Exploit A logic bug in the Linux kernel’s authencesn AEAD template allows an unprivileged user to write 4 controlled bytes into the page cache of any readable file. The provided Python script corrupts /usr/bin/su in memo...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

CVE-2026-87624

A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...

CVE-2026-87630

A flaw was found in WebRTC in Chromium-browser. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the browser's sandbox environment...

CVE-2026-87521

A flaw was found in WebMCP in Chromium. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive cross-origin data...