Lucene search
+L

3612 matches found

Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.4 views

Windows Kerberos Elevation of Privilege Vulnerability

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00318EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.5 views

Windows Kernel Elevation of Privilege Vulnerability

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...

7CVSS0.00204EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.4 views

Windows Spaceport.sys Elevation of Privilege Vulnerability

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00246EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.7 views

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

8.8CVSS0.00819EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 9:26 a.m.12 views

CVE-2026-41096

CVE-2026-41096 - Crash PoC Heap overflow in DnsRawTruncateMessageForUdp dnsapi.dll. A crafted DNS response with QDCOUNT=0 and a large OPT record causes a 604-byte heap overflow when the truncation logic miscalculates the destination pointer. MSRC advisory:...

9.8CVSS8.5AI score0.01932EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.5 views

PT-2026-88629

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS0.00474EPSS
SaveExploits12References235
Kitploit
Kitploit
added 2026/09/07 8:57 p.m.5 views

CVE-2026-20253

🚨 CVE-2026-20253 - Vulnerabilidad Crítica de Creación de Archivos No Autenticada en Splunk Enterprise Vulnerabilidad de creación y truncamiento arbitrario de archivos no autenticada que afecta a Splunk Enterprise y Splunk Cloud Platform. 📖 Resumen Ejecutivo CVE-2026-20253 es una vulnerabilidad...

9.8CVSS6.2AI score0.96939EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/07 7:33 p.m.8 views

CVE-2026-41096-POC

the bug is at DnsQueryRaw function to be specific, inside DnsRawTruncateMessageForUdp so you need a program to call it. I could be wrong, but currently there isnt a service or default program in windows 11 that use this function, thats why i needed client.c. this repo has 2 files, client.c and...

9.8CVSS8.2AI score0.01932EPSS
SaveExploits6
OSV
OSV
added 2026/09/07 6:25 p.m.3 views

CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

7.5CVSS5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/07 10:47 a.m.6 views

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...

5.9CVSS7.1AI score0.93305EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/07 9:23 a.m.5 views

CVE-2025-47812

CVE-2025-47812 Este es un PoC Proof of Concept del Exploit para Wing FTP Server CVE-2025-47812 Descripción Las versiones de Wing FTP Server anteriores a la 7.4.4 sufrieron una vulnerabilidad de Ejecución Remota de Código RCE como resultado del tratamiento inseguro del parámetro username. Cuando s...

10CVSS8.4AI score0.92862EPSS
SaveExploits24
RedhatCVE
RedhatCVE
added 2026/09/07 4:29 a.m.3 views

CVE-2026-86315

A flaw was found in Samsung Open Source Escargot. This out-of-bounds write vulnerability, caused by numeric truncation, allows an attacker to corrupt native memory. By supplying specially crafted JavaScript for execution, a remote attacker can trigger this flaw, leading to the host process crashi...

6.2CVSS5.9AI score0.00123EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/07 4:17 a.m.2 views

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

6.2CVSS0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/07 4:01 a.m.40 views

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

6.2CVSS0.00123EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/07 4:01 a.m.11 views

CVE-2026-86315

Samsung Open Source Escargot (a JavaScript engine) on Linux x86-64 is affected by an out-of-bounds write caused by numeric truncation. A crafted class definition whose instance initialization entry count exceeds UINT16_MAX allows an attacker who can supply JavaScript for execution to corrupt nati...

6.2CVSS6AI score0.00123EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-80760

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: reject HCICMDSYNC paramslen above 255 mgmthcicmdsync checks that the message length agrees with paramslen but puts no upper bound on it...

6.2AI score0.00168EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-86315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to...

6.2CVSS0.00123EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/04 4:53 p.m.37 views

CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

3.7CVSS0.00195EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 4:53 p.m.15 views

CVE-2026-84947

CVE-2026-84947 affects undici (Node.js HTTP client), specifically its dump interceptor . When a chunked response (no Content-Length) exceeds the configurable maximum body size, the interceptor signals completion early without pausing or aborting the request. The underlying parser then delivers a ...

3.7CVSS5.2AI score0.00195EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/04 4:53 p.m.7 views

CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

3.7CVSS5.6AI score
SaveExploits0References4
Rows per page
Query Builder