CVE-2026-31431-Metasploit-exploit

CVE-2026-31431 - Linux Kernel AFALG "Copy Fail" Local Privilege Escalation An automated Metasploit Post-Exploitation module that leverages CVE-2026-31431 popularly known as "Copy Fail" to perform Local Privilege Escalation LPE on vulnerable Linux kernels versions 4.14 through 6.19.12. Description...

Exploit for Write-what-where Condition in Linux Linux_Kernel

iQOO Neo7 Race Edition PD2232 — DirtyFrag Temporary Root...

COPY-FAIL

Copy Fail -- CVE-2026-31431 Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...

asm-copyfail

CVE-2026-31431 Copy Fail — Analysis and development in x86-64 Assembly Based on the source code published in Theori, we will do several exercises until we fully convert it to pure Assembly language without external libraries.python !/usr/bin/env python3 Archivo: copyfail.py import os as...

CVE-2026-31431-CopyFail

██████╗ ██████╗ ██████╗ ██╗ ██╗ ███████╗ █████╗ ██╗██╗ ██╔════╝██╔═══██╗██╔══██╗╚██╗ ██╔╝ ██╔════╝██╔══██╗██║██║ ██║ ██║ ██║██████╔╝ ╚████╔╝ █████╗ ███████║██║██║ ██║ ██║ ██║██╔═══╝ ╚██╔╝ ██╔══╝ ██╔══██║██║██║ ╚██████╗╚██████╔╝██║ ██║ ██║ ██║ ██║██║███████╗ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝...

CVE-2022-0847

CVE-2022-0847 Dirty Pipe Linux Kernel Privilege Escalation Analysis toc This article was first published on Huawei Security's official account, this is the blog version more complete First published link: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Vulnerability Introduction Vulnerability I...

CVE-2022-0847-POC

CVE-2022-0847 CREDITS: vulnerability author: Max Kellermann max kellermann explanation: https://dirtypipe.cm4all.com/ RESOURCES: PAGE CACHE: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 used to achieve container escape overwrite any read-only files on host Slides in Chinese available here 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸（效果为覆写宿主机上任意只读文件） 中文汇报PPT在这里 Introduction If the kernel is vulnerable to CVE-2022-0847, the attacker can overwrite read-only files...

CVE-2022-0847-eBPF

CVE-2022-0847-eBPF An eBPF program to detect and defense attacks on CVE-2022-0847. In the kernel space, the program detects splice system calls, if such a system call contains a pipe as the output fd, and the flags of the pipe buffer is set to PIPEBUFFLAGCANMERGE , then an event would be submitte...

dirty-pipe-poc

POC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe Vulnerability This repo is based of the Vulnerability, Writeup and Exploit produced by Max Kellermann all found here. Just like everyone I had to take advantage of playing with the worlds most trivial to repro Priv Esc the blog post doe...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

CVE-2026-118391

Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where the application interpolates them into...

CVE-2026-118391

The elixir-ecto library (versions 3.4.0 to 3.14.2 ) is vulnerable to a memory exhaustion attack due to unbounded query cache growth. When an application interpolates user-provided JSON keys or list lengths into json_extract_path/2, field[^key], or splice/1, Ecto creates a unique entry in an ETS t...

EEF-CVE-2026-118391 Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

Summary Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where the application interpolates...

CVE-2026-118391 Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where the application interpolates them into...

CVE-2026-118391 Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where the application interpolates them into...

Elixir-Ecto Ecto resource management error vulnerability

Elixir-Ecto versions 3.4.0 through 3.14.3 contain a resource management error vulnerability. This vulnerability arises because Ecto fails to limit the size of cached precompiled queries stored in ETS tables and lacks any eviction mechanism. When an application inserts different JSON keys or list...

CVE-2026-118391: elixir-ecto ecto: Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote…

Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where the application interpolates them into...