EUVD-2025-84339

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability

...

CVE-2025-59504

CVE-2025-59504 is a heap-based buffer overflow vulnerability in Microsoft’s Azure Monitor Agent. Connected sources identify the affected component as the Azure Monitor Agent (Windows), with exploitation possible when running versions prior to 1.37.1. The underlying issue is a heap-based buffer ov...

EUVD-2025-93453

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability

...

AWS VDP: AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints

A vulnerability was discovered in the AWS Auto Scaling service, where 6 API endpoints incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail logs. This allowed the adversary to perform API calls using these endpoints and evade the logging of their IP address a...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

CVE-2025-64773

CVE-2025-64773 affects JetBrains YouTrack prior to version 2025.3.104432. Multiple connected sources (NVD/NASL/Nessus and others) describe a race condition that allows bypassing the helpdesk agent limit. Affected component is YouTrack (web/bug-tracking platform); root cause is described as a race...

MAL-2025-114441 Malicious code in hadi-soto2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2eeea9b3f9cbe43183665828877633d60e843ca314e35623d2d7c8ae5e7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64682

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...

openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding

A flaw was found in OpenSSH. In affected versions of sshd, the DisableForwarding directive does not fully adhere to the intended functionality as documented. Specifically, it fails to disable X11 and agent forwarding, which may allow unintended access under certain configurations...

Azure Monitor Agent Remote Code Execution Vulnerability

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

KLA90054 ACE vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure Monitor Agent. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-59504 Related products Microsoft-Azure Azure-Monitor Azure-Monitor-Agent CVE list CVE-2025-59504 high Solution...

PT-2025-46454

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description A heap-based buffer overflow exists in Azure Monitor Agent. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...

CVE-2025-48878 Combodo iTop vulnerable to IDOR with ModuleInstallation object

Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user e.g. with Service desk agent profile to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue...

EUVD-2025-50777

Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user e.g. with Service desk agent profile to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...

CVE-2025-43079

CVE-2025-43079 concerns Qualys Cloud Agent where the bundled uninstall script qagent_uninstall.sh (Mac/Linux) executes multiple system commands without absolute paths and without sanitizing $PATH. The root cause is reliance on manipulated PATH, enabling a privileged user (root/sudo) with elevated...