CVE-2026-40993 Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository saml2assertingpartymetadata may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials verificationcredentials and...

CVE-2022-31072

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...

CVE-1999-0527

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...

PT-2025-45032

Name of the Vulnerable Software and Affected Versions Mulesoft Anypoint Code Builder versions prior to 1.11.6 Description An issue exists in Salesforce Mulesoft Anypoint Code Builder related to incorrect permission assignment for a critical resource, allowing manipulation of writeable configurati...

Mozilla Thunderbird < 144.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 144.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-84 advisory. - Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory...

EUVD-2000-1058

Malware in sbrugna...

EUVD-2001-1237

Malware in sbrugna...

EUVD-2001-0842

Malware in sbrugna...

EUVD-2000-0710

Malware in sbrugna...

EUVD-2011-1000

Malware in sbrugna...

EUVD-2001-0135

Malware in sbrugna...

EUVD-2000-0785

Malware in sbrugna...

EUVD-1999-1052

Malware in sbrugna...

EUVD-2013-4249

Malware in sbrugna...

EUVD-2020-17935

Malware in sbrugna...

EUVD-1999-1331

Malware in sbrugna...

EUVD-2022-5885

Malicious code in bioql PyPI...

EUVD-2022-6044

Malicious code in bioql PyPI...

CVE-2025-50897

A vulnerability exists in riscv-boom SonicBOOM 1.2 BOOMv1.2 processor implementation, where valid virtual-to-physical address translations configured with write permissions PTEW in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions sd. This occurs despite the...

SUSE CVE-2025-27613

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled...