Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the createconfig path in awscli/customizations/codedeploy/register.py. An attacker can read the CodeDeploy on-premises configuration file by accessing it on the same Unix-like ho...

CVE-2026-32315

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...

OPENSUSE-SU-2026:20318-1 Security update for gitea-tea

This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea api subcommand for arbitrary API calls not covered by existing commands in 879 - Add repository...

Security update for gitea-tea (moderate)

openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2025:0454-1 Rating: moderate References: 1251471 1251663 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

CVE-2025-64319

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

EUVD-2025-20399

Malicious code in bioql PyPI...

PT-2025-28349 · Plc · Plc

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A low-privileged remote attacker can force the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file. Recommendations: At the moment, there...

PHOENIX CONTACT多款产品 安全漏洞

PHOENIX CONTACT AXC F 1152 and others are a controller device from PHOENIX CONTACT, Germany. A security vulnerability exists in various PHOENIX CONTACT products, which stems from incorrect default permissions in the configuration file, which could lead to a low-privilege attacker forcing the...

CVE-2020-10589

v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo...

Mattermost Server Access Control Error Vulnerability (CNVD-2020-35180)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An Access Control Error vulnerability exists in Mattermost Server, which stems from the program assigning the wrong permissions to a configuration file and can be exploited by an attacker to elevate...

CVE-2019-1211

An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated attacker would ne...

Alertus Desktop Notification for OS X Design Vulnerability

Alertus Desktop Notification for OS X is a suite of desktop notification software from Alertus Inc. for OS X, a specialized operating system developed for Mac computers. A security vulnerability exists in Alertus Desktop Notification for OS X prior to version 2.9.30.1710, which arises from the...

redhat-printtool.txt

Hackerslab bugpaper Linux printtool get printer password File : /usr/bin/printtool SYSTEM : Linux INFO : If make printer configuration by printtool package, It make vule config file. Config file perrmission is "-rw-r--r-- root root". If use samba network printer, password stored in config file...