CVE-2026-99241

A flaw was found in the Linux kernel's NTFS file system driver. A local user can cause a Denial of Service DoS or file system corruption by exploiting a race condition between concurrent memory-mapped write operations and file truncation or allocation. Because the driver omits proper...

CVE-2026-20253

🚨 CVE-2026-20253 - Critical Splunk Enterprise Unauthenticated File Creation Vulnerability Unauthenticated arbitrary file creation and truncation vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. 📖 Executive Summary CVE-2026-20253 is a critical vulnerability in Splunk Enterprise...

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone https://github.com/HORKimhab/CVE-2026-20253 cd...

CVE-2026-119298

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as a trusted text-transfer artifact even when SendingText is...

EUVD-2026-114188

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as a trusted text-transfer artifact even when SendingText is...

CVE-2026-119298 croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as a trusted text-transfer artifact even when SendingText is...

CVE-2026-119298

The croc file transfer tool is vulnerable to an overwrite-confirmation bypass in versions prior to 11.5.2 . The issue exists in the receive-side file-readiness loop within src/croc/croc.go, where sender-controlled basenames starting with croc-stdin- are incorrectly treated as trusted text-transfe...

CVE-2026-119298 croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as a trusted text-transfer artifact even when SendingText is...

PT-2026-133674

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as a trusted text-transfer artifact even when SendingText is...

CVE-2026-99111

A flaw was found in the Linux kernel's Server Message Block SMB client. Inadequate locking during file truncation allows a local user to perform concurrent write operations while a file is being truncated. This race condition causes newly written data to be discarded silently, resulting in data...

CVE-2026-107053

The foobnix Librera PDF Reader (versionCode 7222 ) contains a vulnerability due to insecure permissions . This flaw allows unauthorized attackers to arbitrarily write and truncate files within a shared storage space located outside of the application's sandbox. Specific details regarding exploita...

Ivan Ivanenko Librera Reader security vulnerability

The Librera Reader version 7222 by Ivan Ivanenko contains a security vulnerability stemming from improper permission settings. This vulnerability may allow unauthorized attackers to write and truncate files within shared storage space outside the sandbox...

EUVD-2026-105017

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path...

SUSE CVE-2026-112909

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rename permission, or hard-linked there under a permissive hard-link policy; when an explicit mode is requested, affected...

CVE-2026-86147 Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof

External control of file name or path and uncontrolled resource consumption in Apache bRPC version 1.18.0 on all platforms allows remote attackers who can reach the builtin service port to create directories and truncate/overwrite files with the privileges of the server process, or to hold the...

CVE-2026-86147

Apache bRPC (version

CVE-2026-86147 Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof

External control of file name or path and uncontrolled resource consumption in Apache bRPC version 1.18.0 on all platforms allows remote attackers who can reach the builtin service port to create directories and truncate/overwrite files with the privileges of the server process, or to hold the...

CVE-2026-112909

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rename permission, or hard-linked there under a permissive hard-link policy; when an explicit mode is requested, affected...

CVE-2026-112909

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rename permission, or hard-linked there under a permissive hard-link policy; when an explicit mode is requested, affected...

PT-2026-118385

Name of the Vulnerable Software and Affected Versions filelock versions prior to 4.2.1 Description In UnixFileLock, a regular file renamed onto the lock path can be truncated if another local user possesses rename permissions or if the file is hard-linked under a permissive hard-link policy...