CVE-2022-1175

CVE-2022-1175 Gitlab Stored XSS, can be set in an issue on a project, either your own or another users. Allows attacks such as creating & stealing a Personal Access Token PAT of anyone who visits an issue. PAT's can then provide full Gitlab API access as that user equivilent to a full account...

CVE-2024-48197

CVE-2024-48197 Reflected XSS in AudioCodes MP-202b Description Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface. Additional Information N/A Vulnerability Type Cross Site Scripting XSS Reflected...

pedrocruz2202.github.io

This repository does not have a README...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 bytes para root en todas las principales distribuciones de Linux CVE-2026-31431 Copy Fail es un error lógico en la plantilla criptográfica authencesn del kernel de Linux. Permite que un usuario local sin privilegios provoque una escritura determinista y controla...

CVE-2026-31431-Copy-Fail-add-arm64

漏洞概述 项目| 内容 ---|--- CVE 编号| CVE-2026-31431 漏洞名称| Copy Fail 漏洞类型| Linux 内核本地提权 LPE CVSS 3.1 评分| 7.8 HIGH CWE| CWE-669: Incorrect Resource Transfer Between Spheres 影响范围| 2017 年至 2026 年 4 月间构建的所有 Linux 内核 CISA KEV| 已列入，截止修复日期 2026-05-15 公开时间| 2026-04-29 漏洞原理 2017 年内核在 algifaead...

cve-2026-31431

CVE-2026-31431（Copy Fail）工具集 本仓库包含 Linux algifaead / authencesn 页缓存 scratch-write 漏洞 CVE-2026-31431 的检测器和 PoC。 披露文章：https://xint.io/blog/copy-fail-linux-distributions 授权说明 仅可在你拥有或已获得明确授权的主机上使用。检测器是无破坏性的，只操作临时目录中的 sentinel 文件；PoC 和 LPE 会修改内存中的页缓存状态，属于真实的本地提权技术，未授权运行通常是违法行为。 漏洞概述 algifaead 会以原地方式执行...

CVE-2026-31431---Copy-Fail-PoC

描述 本仓库包含对 Linux 内核中 CVE-2026-31431（Copy Fail）的分析。它通过页缓存操作实现本地权限提升（LPE）。 法律声明 本项目仅用于教育和测试目的。任何未经授权的使用均由用户自行承担全部责任。 用法与资源 用法： root@kitploit: curl -O URL/exploit.py python3 exploit.py id 参考 Linux 内核 Copy Fail（CVE-2026-3143） | Copy.fail...

CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 复制错误（CVE-2026-31431）——本地权限提升漏洞利用 Linux 内核 authencesn AEAD 模板中的一个逻辑错误，允许无特权用户向任何可读文件的页缓存中写入 4 个受控字节。 所提供的 Python 脚本会在内存中破坏 /usr/bin/su，并生成一个 root shell。 漏洞概述 CVE-2026-31431 是 Linux 内核加密子系统中的一个漏洞，具体位于 authencesn（扩展序列号 AEAD）模板与 AFALG 套接字接口及 splice 系统调用相结合的部分。 根本原因 ：authencesn...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

CVE-2026-87624

A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...

CVE-2026-87630

A flaw was found in WebRTC in Chromium-browser. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the browser's sandbox environment...

CVE-2026-87521

A flaw was found in WebMCP in Chromium. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive cross-origin data...

CVE-2026-87451

A flaw was found in Google Chrome. This information leak vulnerability in the Downloads component allows a remote attacker, who has already compromised the browser's renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML...

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87538

A flaw was found in Chromium. A remote attacker, after compromising the renderer process and leveraging social engineering, could exploit a clickjacking vulnerability in the input mechanism. This could allow the attacker to spoof user interface UI elements via a specially crafted HTML page,...

CVE-2026-87543

A flaw was found in Google Chrome. A remote attacker who has compromised the renderer process can exploit a missing authorization vulnerability by crafting a malicious HTML page. This allows them to bypass site isolation, which is a security mechanism designed to protect user data and prevent...

CVE-2026-87653

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation in FullScreen mode, allowing the attacker to spoof UI elements...

CVE-2026-87620

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the Scalable Vector Graphics SVG rendering engine by enticing a user to open a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87519

A flaw was found in Safebrowsing. This incorrect authorization vulnerability could allow a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page...