Lucene search
+L

3612 matches found

Cvelist
Cvelist
added 2026/09/11 7:43 p.m.17 views

CVE-2026-89450 iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SIDMATCH field tegra241vintfinitvsid programs the guest-provided vSID into SIDMATCH, whose VIRTSID field spans bits 20:1 with bit 0 as the match-enable flag. The HW therefore...

0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 5:41 p.m.6 views

EUVD-2026-76166

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

6.1CVSS0.00117EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/11 5:41 p.m.19 views

CVE-2026-18495

CVE-2026-18495 is a heap-buffer overflow in the tiff2pdf utility within libtiff , triggered by an integer truncation error when processing a crafted BigTIFF file. A 64-bit StripByteCounts value is truncated to 32 bits, causing an undersized memory allocation followed by an out-of-bounds copy, lea...

6.1CVSS0.00117EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/11 5:41 p.m.8 views

CVE-2026-18495

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

6.1CVSS0.00117EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/11 5:41 p.m.21 views

CVE-2026-18495 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

6.1CVSS0.00117EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90206

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2 dir foreach blk el, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-s blocksize - 1 | offset; ctx-pos is loff t signed 64-bit, while sb-s...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90439

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs direct propagate after truncation Shuangpeng Bai reported that KASAN detected a slab-out-of-bounds error in nilfs direct propagate during testing. Analysis revealed that after truncating a...

0.002EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 8:04 p.m.8 views

json-interop-vuln-labs

JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 7:22 p.m.10 views

CVE-2025-4138-poc

CVE-2025-4138 Generador Auto-Sudo Un script de Python para generar un archivo tar malicioso que explota CVE-2025-4138 / CVE-2025-4517 Recorrido de rutas mediante truncamiento de PATHMAX. Explotar con éxito esta vulnerabilidad permite a un atacante eludir los filtros de extracción de tarfile y...

7.5CVSS6.9AI score0.01385EPSS
SaveExploits7
NVD
NVD
added 2026/09/10 2:17 p.m.6 views

CVE-2026-88873

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows unauthenticated attackers to archive application logs by making GET requests without CSRF token validation. Attackers can craft malicious...

7.1CVSS0.00136EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.12 views

CVE-2026-88873

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a Cross-Site Request Forgery vulnerability in view/logArchive.json.php. The endpoint accepts GET requests without CSRF token validation , allowing unauthenticated attackers to craft malicious pages that trigger an admini...

7.1CVSS0.00136EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/10 10:38 a.m.8 views

CVE-2026-59985

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted RLE-compressed EXR image, which causes a 64-bit unpacked size to truncate before memory allocation. This leads to a heap out-of-bounds read when unpack32bit attempts to read beyond the allocated buffer. Successful...

5.5CVSS0.0018EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/10 9:00 a.m.8 views

CVE-2026-59984

A flaw was found in OpenEXR. When processing a specially crafted B44-compressed EXR image, an out-of-bounds write can occur due to an integer truncation vulnerability in ILP32 builds. This allows an attacker to cause a denial of service or potentially lead to memory corruption. Mitigation Red Hat...

5.5CVSS0.0018EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010...

9.6CVSS0.00461EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 5:14 p.m.6 views

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone...

9.8CVSS6.3AI score0.96939EPSS
SaveExploits7
RedHat Linux
RedHat Linux
added 2026/09/09 1:42 p.m.5 views

undici: Undici: Response truncation and connection termination

A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...

3.7CVSS0.00195EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/09 1:37 a.m.4 views

CVE-2026-87529

A flaw was found in Media in Google Chrome. This numeric truncation error allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

9.6CVSS0.00461EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.3 views

DEBIAN-CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6.8AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.4 views

CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS0.00461EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.34 views

CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

0.00461EPSS
SaveExploits0References2
Rows per page
Query Builder