AEGLIX intelligence library
Search retained source observations. Historical records do not establish current threat activity; always check the original source before acting.
The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user dat…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:17.860
Explore vulnerabilityA race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy pref…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:17.313
Explore vulnerabilityAn access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:16.570
Explore vulnerabilityThe issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:11.563
Explore vulnerabilityThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:11.460
Explore vulnerabilityAn authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS 27. An app may be able to access sensitive user data.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:11.347
Explore vulnerabilityOpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowe…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:10.673
Explore vulnerabilityJoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attac…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:10.527
Explore vulnerabilitypiflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:10.383
Explore vulnerabilityLangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabl…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:10.240
Explore vulnerabilityLangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by t…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:10.103
Explore vulnerabilityNing compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers …
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:09.957
Explore vulnerabilitySummary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI (session…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:09.787
Explore vulnerabilitySummary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size and no limit on concurrent streams. A rem…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T01:17:09.613
Explore vulnerabilityIBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST r…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T00:19:20.530
Explore vulnerabilityA security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T00:17:30.750
Explore vulnerabilityIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T00:17:30.370
Explore vulnerabilityIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T00:17:25.790
Explore vulnerabilityIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content…
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T00:17:25.640
Explore vulnerabilityIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
Source: nvd_cves · Retrieved:
Source date: 2026-10-20T00:17:23.400
Explore vulnerability