CVE-2026-77268 MCP Atlassian: Insecure File Permissions on OAuth Token Storage

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bi...

CVE-2026-77250 MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a...

CVE-2026-77250 MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a...

CVE-2026-77250 MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a...

CVE-2026-93378

A missing authorization flaw was found in the Storage component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540051167...

CVE-2026-77633 Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...

CVE-2026-77633

Cloudreve , a self-hosted file management and sharing system, contains a TOCTOU race condition in PrepareUpload (pkg/filemanager/fs/dbfs/upload.go) prior to version 4.18.0. The function checks a stale in-memory storage value via validateUserCapacity, then applies an unconditional storage charge o...

shaha

shaha Hash database builder and reverse lookup tool. SHA + aha! Build precomputed hash databases from wordlists, then query them to find preimages. Installation root@kitploit: cargo install shaha Or build from source: root@kitploit: git clone https://github.com/oritwoen/shaha cd shaha cargo build...

PT-2026-96795

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.18.0 Description An authenticated user with Files.Write permission can exploit a Time-of-Check to Time-of-Use TOCTOU race condition in the PrepareUpload function within pkg/filemanager/fs/dbfs/upload.go. The syste...

PT-2026-97070

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description Improper enforcement of storage limits allows a remote authenticated attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-17465: Uncontrolled Resource Consumption

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits...

CVE-2026-77250: Cleartext Storage of Sensitive Information

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a...

CVE-2026-77633: Concurrent Execution using Shared Resource with Improper Synchronization

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntfs-3g (UTSA-2022-000915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000915 advisory. A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the...

CVE-2026-58504

CVE-2026-58504 is a Stored XSS in draw.io prior to version 30.2.5 , constituting a patch bypass of CVE-2026-46642 . When a victim opens or imports a crafted .drawio file, a pair of sibling cells triggers the vulnerability: an HTML cell keeps the formatted-label path active while an editable=0 pla...

CVE-2026-58504 draw.io: Stored XSS on file open via editable=0 sibling cell — patch bypass of CVE-2026-46642

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript in the draw.io origin when selected cells are processed by TextFormatPanel.addFont in...

CVE-2026-63373: Cross-Site Request Forgery (CSRF)

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, the OAuth callback handler in src/main/java/com/mxgraph/online/AbsAuth.java skips comparison of stateToken and cookieToken whenever ISGAE is false, which affects self-hosted Docker and WAR deployments. A...

CVE-2026-15890: Reusing a Nonce, Key Pair in Encryption

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...

PT-2026-96272

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description An issue exists in the PSA Internal Trusted Storage ITS transform module where the function secure storage its transform aead get nonce uses unsynchronized function-local static variables s...

The vulnerability of the Token Storage Mechanism in the CollectionRemote plugin of the Ansible-content management tool pulp_ansible on the Pulp repository management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CollectionRemote mechanism, a plugin for managing Ansible content on the pulpansible platform, which manages repositories for Pulp, relates to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...