Lucene search
+L

3612 matches found

Cvelist
Cvelist
added 2026/09/11 7:43 p.m.21 views

CVE-2026-89450 iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SIDMATCH field tegra241vintfinitvsid programs the guest-provided vSID into SIDMATCH, whose VIRTSID field spans bits 20:1 with bit 0 as the match-enable flag. The HW therefore...

0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 5:41 p.m.6 views

EUVD-2026-76166

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

6.1CVSS0.00117EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/11 5:41 p.m.19 views

CVE-2026-18495

CVE-2026-18495 is a heap-buffer overflow in the tiff2pdf utility within libtiff , triggered by an integer truncation error when processing a crafted BigTIFF file. A 64-bit StripByteCounts value is truncated to 32 bits, causing an undersized memory allocation followed by an out-of-bounds copy, lea...

6.1CVSS0.00117EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/11 5:41 p.m.9 views

CVE-2026-18495

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

6.1CVSS0.00117EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/11 5:41 p.m.26 views

CVE-2026-18495 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...

6.1CVSS0.00117EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90206

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2 dir foreach blk el, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-s blocksize - 1 | offset; ctx-pos is loff t signed 64-bit, while sb-s...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90439

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs direct propagate after truncation Shuangpeng Bai reported that KASAN detected a slab-out-of-bounds error in nilfs direct propagate during testing. Analysis revealed that after truncating a...

0.002EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 8:04 p.m.8 views

json-interop-vuln-labs

JSON 互操作性漏洞实验室 描述 这些是我研究文章《探索 JSON 互操作性漏洞》的配套实验室。 实验 1:电子商务应用中的免费购买 键碰撞攻击:重复键优先级不一致 大数表示不一致 实验 2:多租户应用中的权限提升 键碰撞攻击:字符截断 默认情况下,这些实验室绑定到主机的 5000-5004 端口。 攻击技术 1. 键碰撞 重复键优先级不一致 root@kitploit: "qty": 1, "qty": -1 字符截断 对于后键优先的解析器,会发生截断(对于前键优先的解析器,则需翻转顺序) root@kitploit: "qty": 1, "qty": -1 "qty": 1,...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 7:22 p.m.10 views

CVE-2025-4138-poc

CVE-2025-4138 Generador Auto-Sudo Un script de Python para generar un archivo tar malicioso que explota CVE-2025-4138 / CVE-2025-4517 Recorrido de rutas mediante truncamiento de PATHMAX. Explotar con éxito esta vulnerabilidad permite a un atacante eludir los filtros de extracción de tarfile y...

7.5CVSS6.9AI score0.01385EPSS
SaveExploits7
NVD
NVD
added 2026/09/10 2:17 p.m.7 views

CVE-2026-88873

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows unauthenticated attackers to archive application logs by making GET requests without CSRF token validation. Attackers can craft malicious...

7.1CVSS0.00136EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.12 views

CVE-2026-88873

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a Cross-Site Request Forgery vulnerability in view/logArchive.json.php. The endpoint accepts GET requests without CSRF token validation , allowing unauthenticated attackers to craft malicious pages that trigger an admini...

7.1CVSS0.00136EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/10 10:38 a.m.8 views

CVE-2026-59985

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted RLE-compressed EXR image, which causes a 64-bit unpacked size to truncate before memory allocation. This leads to a heap out-of-bounds read when unpack32bit attempts to read beyond the allocated buffer. Successful...

5.5CVSS0.0018EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/10 9:00 a.m.8 views

CVE-2026-59984

A flaw was found in OpenEXR. When processing a specially crafted B44-compressed EXR image, an out-of-bounds write can occur due to an integer truncation vulnerability in ILP32 builds. This allows an attacker to cause a denial of service or potentially lead to memory corruption. Mitigation Red Hat...

5.5CVSS0.0018EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010...

9.6CVSS0.00461EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 5:14 p.m.6 views

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ 简单用法 仅在安全且经过授权的环境中使用此项目,例如: 本地虚拟机 Docker容器 隔离实验室环境 经授权的渗透测试环境 示例设置: root@kitploit: git clone https://github.com/HORKimhab/CVE-2026-20253 cd CVE-2026-20253 Project use python follow below Create a virtual environment python -m venv venv Activate the virtual...

9.8CVSS6.3AI score0.96939EPSS
SaveExploits7References2
RedHat Linux
RedHat Linux
added 2026/09/09 1:42 p.m.5 views

undici: Undici: Response truncation and connection termination

A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...

3.7CVSS0.00195EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/09 1:37 a.m.4 views

CVE-2026-87529

A flaw was found in Media in Google Chrome. This numeric truncation error allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

9.6CVSS0.00461EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.3 views

DEBIAN-CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6.8AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 1:17 a.m.4 views

CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS0.00461EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/09 12:09 a.m.34 views

CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

0.00461EPSS
SaveExploits0References2
Rows per page
Query Builder