Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2026-137)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.39.1.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-137 advisory. An Envoy proxy handling HTTP/3 connections can dereference a null transport socket option during t...

JGD

⚡ JGD JavaGadgetDigger — Solving the Last Mile of Deseria...

hermes-agent v2026.9.11

Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - Escalada de Privilegios en la Reparación MSI del Agente CheckMK NanoCorp HTB Este repositorio contiene un script de PowerShell utilizado para explotar CVE-2024-0670 en la máquina NanoCorp de Hack The Box. La vulnerabilidad permite a un usuario con pocos privilegios abusar de la...

clawpatrol v0.5.10

clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request...

google-osconfig-agent-20260908.00-1.1 on GA media (moderate)

google-osconfig-agent-20260908.00-1.1 on GA media Announcement ID: openSUSE-SU-2026:11743-1 Rating: moderate Cross-References: CVE-2026-84303 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-84303 SUSE : 9.1...

google-osconfig-agent-20260908.00-2.1 on GA media (moderate)

google-osconfig-agent-20260908.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:11751-1 Rating: moderate Cross-References: CVE-2026-56854 CVSS scores: CVE-2026-56854 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-56854 SUSE : 8.6...

google-guest-agent-20260903.01-1.1 on GA media (moderate)

google-guest-agent-20260903.01-1.1 on GA media Announcement ID: openSUSE-SU-2026:11742-1 Rating: moderate Cross-References: CVE-2026-84304 CVSS scores: CVE-2026-84304 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-84304 SUSE : 8.7...

CyberStar

--- Table of Contents - Overview - Architectu...

SkillSecurer: Detecting and Patching Prompt-Injection Vulnerabilities in AI Agent Skills

Agent skills extend AI agents with reusable instructions, scripts, and configuration, but are also open to new attacks to influence an agent's decisions and actions. To address these risks, we present SkillSecurer, a fully agentic framework for generating, detecting, localising, and remediating...

[SECURITY] Fedora 45 Update: baresip-4.11.0-1.fc45

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...

CVE-2026-89332 Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

CVE-2026-89332

Amazon Kiro IDE (before version 0.8.135 ) is vulnerable to sensitive workspace data exfiltration through its Kiro Powers feature. Crafted repository content can cause the AI agent to modify the workspace settings file, redirecting the Kiro Powers registry request to an actor-controlled endpoint. ...

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence AI company has branded Generative...

Security Bulletin: Multiple vulnerabilities in OpenSSH affect AIX

Summary There are multiple vulnerabilities in OpenSSH used by AIX CVE-2026-73281,CVE-2026-73282, CVE-2026-73283. OpenSSH is used by AIX for remote login. Vulnerability Details CVEID:CVE-2026-73281 DESCRIPTION: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intend...

CVE-2026-89147

Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...

Improper Output Neutralization for Logs

Overview morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the escapeLogField function. An attacker can manipulate log entries by injecting unescaped double quotes into HTTP headers such as...

Improper Output Neutralization for Logs

Overview org.webjars.npm:morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the escapeLogField function. An attacker can manipulate log entries by injecting unescaped double quotes into HTTP heade...

CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: docker-compose, kube-mgmt, buildkitd, cloudbeat, kubescape-server, chainctl-fips, neuvector-fips, spegel, k9s, packer, headlamp, k8sgpt, kargo, grype-db, kubevela-fips, helm-set-status, amazon-ecs-agent-fips, amazon-ecs-agent, xeol, nerdctl, harvester-fips,...