CVE-2022-1175

CVE-2022-1175 GitLab の格納型 XSS Stored XSS。自分のプロジェクトまたは他のユーザーのプロジェクトの issue に設定できます。issue を訪れた任意のユーザーの Personal Access Token PAT を作成・窃取するなどの攻撃が可能です。窃取した PAT は、そのユーザーとしての完全な GitLab API アクセスを提供し、アカウントの完全乗っ取りに相当します。 プロジェクトのベース base...

CVE-2024-48197

CVE-2024-48197 AudioCodes MP-202b における反射型XSS 説明 Audiocodes MP-202b v.4.4.3 におけるクロスサイトスクリプティングの脆弱性により、リモートの攻撃者がWebインターフェースのログインページを介して権限を昇格させることが可能です。 追加情報 N/A 脆弱性タイプ 反射型クロスサイトスクリプティング XSS 製品ベンダー Audiocodes 影響を受ける製品コードベース MP-202b - 4.4.3 影響を受けるコンポーネント デバイスのWebインターフェースのログインページ 攻撃タイプ リモート 権限昇格への影響...

pedrocruz2202.github.io

此存储库没有 README。...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 bytes para root en todas las principales distribuciones de Linux CVE-2026-31431 Copy Fail es un error lógico en la plantilla criptográfica authencesn del kernel de Linux. Permite que un usuario local sin privilegios provoque una escritura determinista y controla...

CVE-2026-31431-Copy-Fail-add-arm64

漏洞概述 项目| 内容 ---|--- CVE 编号| CVE-2026-31431 漏洞名称| Copy Fail 漏洞类型| Linux 内核本地提权 LPE CVSS 3.1 评分| 7.8 HIGH CWE| CWE-669: Incorrect Resource Transfer Between Spheres 影响范围| 2017 年至 2026 年 4 月间构建的所有 Linux 内核 CISA KEV| 已列入，截止修复日期 2026-05-15 公开时间| 2026-04-29 漏洞原理 2017 年内核在 algifaead...

cve-2026-31431

CVE-2026-31431（Copy Fail）工具集 本仓库包含 Linux algifaead / authencesn 页缓存 scratch-write 漏洞 CVE-2026-31431 的检测器和 PoC。 披露文章：https://xint.io/blog/copy-fail-linux-distributions 授权说明 仅可在你拥有或已获得明确授权的主机上使用。检测器是无破坏性的，只操作临时目录中的 sentinel 文件；PoC 和 LPE 会修改内存中的页缓存状态，属于真实的本地提权技术，未授权运行通常是违法行为。 漏洞概述 algifaead 会以原地方式执行...

CVE-2026-31431---Copy-Fail-PoC

描述 本仓库包含对 Linux 内核中 CVE-2026-31431（Copy Fail）的分析。它通过页缓存操作实现本地权限提升（LPE）。 法律声明 本项目仅用于教育和测试目的。任何未经授权的使用均由用户自行承担全部责任。 用法与资源 用法： root@kitploit: curl -O URL/exploit.py python3 exploit.py id 参考 Linux 内核 Copy Fail（CVE-2026-3143） | Copy.fail...

CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 复制错误（CVE-2026-31431）——本地权限提升漏洞利用 Linux 内核 authencesn AEAD 模板中的一个逻辑错误，允许无特权用户向任何可读文件的页缓存中写入 4 个受控字节。 所提供的 Python 脚本会在内存中破坏 /usr/bin/su，并生成一个 root shell。 漏洞概述 CVE-2026-31431 是 Linux 内核加密子系统中的一个漏洞，具体位于 authencesn（扩展序列号 AEAD）模板与 AFALG 套接字接口及 splice 系统调用相结合的部分。 根本原因 ：authencesn...

CVE-2022-1011

CVE-2022-1011 修复链接：https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 该漏洞主要是由于漏洞的主要只由于splice的异步的特性，导致可以在用户文件系统进程中（服务端）保留服务请求的进程（客户端）的一段内存。文件系统进程在write关闭后仍然保持着对write源内存页的引用（文件系统进程只有读的权限，个人感觉危害不大:）。...

CVE-2026-87624

A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...

CVE-2026-87630

A flaw was found in WebRTC in Chromium-browser. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the browser's sandbox environment...

CVE-2026-87521

A flaw was found in WebMCP in Chromium. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive cross-origin data...

CVE-2026-87451

A flaw was found in Google Chrome. This information leak vulnerability in the Downloads component allows a remote attacker, who has already compromised the browser's renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML...

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87538

A flaw was found in Chromium. A remote attacker, after compromising the renderer process and leveraging social engineering, could exploit a clickjacking vulnerability in the input mechanism. This could allow the attacker to spoof user interface UI elements via a specially crafted HTML page,...

CVE-2026-87543

A flaw was found in Google Chrome. A remote attacker who has compromised the renderer process can exploit a missing authorization vulnerability by crafting a malicious HTML page. This allows them to bypass site isolation, which is a security mechanism designed to protect user data and prevent...

CVE-2026-87653

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation in FullScreen mode, allowing the attacker to spoof UI elements...

CVE-2026-87620

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the Scalable Vector Graphics SVG rendering engine by enticing a user to open a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87519

A flaw was found in Safebrowsing. This incorrect authorization vulnerability could allow a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page...