container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command

Product Name: container Github Link: https://github.com/apple/container Version: = 0.12.2 Summary The container system dns create --localhost command accepts a domainName argument and passes it unsanitized into the pf anchor file /etc/pf.anchors/com.apple.container as a comment in a rule line. A...

GHSA-39G5-644C-QWCG container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command

Product Name: container Github Link: https://github.com/apple/container Version: = 0.12.2 Summary The container system dns create --localhost command accepts a domainName argument and passes it unsanitized into the pf anchor file /etc/pf.anchors/com.apple.container as a comment in a rule line. A...

CVE-2026-41427

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, the clientPrivileges option documents a create action, but the OAuth client creation endpoints did not invoke the hook before persisting new clients. Deployments that configured clientPrivileges to restrict...

CVE-2026-35359

A Time-of-Check to Time-of-Use TOCTOU vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent. The utility checks if a source path is a symbolic link using path-based metadata but subsequently opens it without the ONOFOLLOW flag. An attacker with...

CVE-2026-41133 pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

pyLoad is a free and open-source download manager written in Python. Versions up to and including 0.5.0b3.dev97 cache role and permission in the session at login and continues to authorize requests using these cached values, even after an admin changes the user's role/permissions in the database...

CVE-2026-41133 pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

pyLoad is a free and open-source download manager written in Python. Versions up to and including 0.5.0b3.dev97 cache role and permission in the session at login and continues to authorize requests using these cached values, even after an admin changes the user's role/permissions in the database...

CVE-2026-31369

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368 Privilege Bypass in AiAssistant

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368 Privilege Bypass in AiAssistant

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31368

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

EUVD-2026-24063

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31369

Technical details about CVE-2026-31369 are not publicly provided in the connected documents. Monitor for updates from NVD, CVE List, and vendor advisories as new information becomes available.

CVE-2026-31369

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

EUVD-2026-24065

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31369 Privilege Bypass in PcManager

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-31369 Privilege Bypass in PcManager

PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

PT-2026-33916

Name of the Vulnerable Software and Affected Versions AiAssistant affected versions not specified Description A privilege bypass issue exists that may affect service availability if successfully exploited. Recommendations At the moment, there is no information about a newer version that contains ...

Honor PcManager 安全漏洞

Honor PcManager is a computer device management tool developed by the Honor company. Honor PcManager has a security vulnerability, which stems from a type of privilege bypass mechanism. This vulnerability may affect the availability of services...