CVE-2026-48790: Incorrect Default Permissions

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

man-db 2.4.1 - open_cat_stream() Local uidman

man-db 2.4.1 - opencatstream Local uidman !/bin/bash xmandb.sh: shell command file. man-dbv2.4.1-: local uid=man exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo opencatstream privileged call exploit. i've been conversing with the new man-db maintainer, and after the initial post sent to...

man-db 2.4.1 open_cat_stream() Local uid=man Exploit

No description provided by source. !/bin/bash xmandb.sh: shell command file. man-dbv2.4.1-: local uid=man exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo opencatstream privileged call exploit. i've been conversing with the new man-db maintainer, and after the initial post sent to...

man-db 2.4.1 - 'open_cat_stream()' Local uid=man

!/bin/bash xmandb.sh: shell command file. man-dbv2.4.1-: local uid=man exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo opencatstream privileged call exploit. i've been conversing with the new man-db maintainer, and after the initial post sent to bugtraqwhich i forgot to inform him, i sent...