302 matches found
Suborner
Suborner: The Invisible Account Forger What's this? A simple program to create a Windows account you will only know about : Create invisible local accounts without net user or Windows OS user management applications e.g. netapi32::netuseradd Works on all Windows NT Machines Windows XP to 11,...
CVE-2026-85300
CVE-2026-85300 — camel-pqc: private key written with permissive file permissions Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-pqc's FileBasedKeyLifecycleManager wrote generated key material to disk with the permissions the process default umask produced ,...
CVE-2025-30051
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3...
EUVD-2025-211181
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3...
CVE-2025-30051 Insecure File Permissions in CGM CLININET
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3...
CVE-2025-30051
The CGM CLININET application contains a vulnerability where the SysIO.pl configuration file is assigned insecure file permissions. This allows any local account to read the file, which stores sensitive production database login and password information along with RabbitMQ broker credentials . The...
PT-2026-121803
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3...
CVE-2025-30051: Incorrect Permission Assignment for Critical Resource
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3...
EUVD-2026-105303
virtualenv: Generated files can follow existing destination links...
AZL-110124 CVE-2026-113721 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator.generate removes an existing output only when Path.exists is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write opens pyvenv.cfg...
CVE-2026-113721
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator.generate removes an existing output only when Path.exists is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write opens pyvenv.cfg...
CVE-2026-113721 virtualenv: Generated files can follow existing destination links
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator.generate removes an existing output only when Path.exists is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write opens pyvenv.cfg...
CVE-2026-113721
The virtualenv tool is vulnerable to a link-following issue prior to version 21.14.9 . The root cause lies in ViaTemplateActivator._generate() only removing existing output if Path.exists() is true, which allows a dangling symlink to persist and redirect generated activation content. Additionally...
Exploit for CVE-2026-85300
CVE-2026-85300 — camel-pqc: private key written with permissiv...
PT-2026-118627
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.9 Description A flaw exists where ViaTemplateActivator. generate only removes existing output if Path.exists is true, which allows a dangling symlink to persist and redirect activation content. Additionally,...
Python Packaging Authority virtualenv post-link vulnerability
The Python Packaging Authority identifies a post-link vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because ViaTemplateActivator.generate deletes existing outputs only when Path.exists returns true. As a result, empty symbolic links can persist and redirect...
CVE-2026-85300 Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the component wrote generated key material to disk it did so with the permissions the process default umask produced, rather than...
EUVD-2026-104199
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the component wrote generated key material to disk it did so with the permissions the process default umask produced, rather than...
CVE-2026-85300 Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the component wrote generated key material to disk it did so with the permissions the process default umask produced, rather than...
CVE-2026-85300 Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the component wrote generated key material to disk it did so with the permissions the process default umask produced, rather than...