Malicious Package

Overview alexa-cybertron-team-code-review-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

kestrel

La visibilidad a nivel de kernel de Falco, con la interfaz en vivo que las herramientas nativas del kernel no incluyen. Inicio rápido · Especificación · Vistas · Hoja de ruta Kestrel rastrea eventos del kernel ejecución de procesos, acceso a archivos, conexiones de red con un agente eBPF y los...

TarantuBench

TarantuBench v1 Un benchmark para evaluar agentes de IA en desafíos de seguridad web, generado por el motor de TarantuLabs. ¿Qué es esto? TarantuBench es una colección de 100 aplicaciones web vulnerables, cada una con una bandera oculta TARANTU.... La tarea de un agente es encontrar y extraer la...

jvmtiAgentLoad-Exploit

Ejecución de código arbitrario mediante jvmtiAgentLoad Descripción: Herramientas y código para generar un JAR malicioso para explotar jvmtiAgentLoad Uso: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Objetivo Linux El siguiente comando genera un JAR mal.jar que...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

CLEANSTART-2026-AG71066 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

Security vulnerability affects the consul package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

CLEANSTART-2026-IF71348 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh

Security vulnerability affects the consul package. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh...

EUVD-2026-91129

In Devika v1.0, the Feature Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace, potentially compromising the entire server...

EUVD-2026-91130

In Devika v1.0, the Patcher Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace...

CVE-2026-51914: Undefined Security Weakness

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, saveagentastemplate and publishtemplate in superagi/controllers/agenttemplate.py accept caller-supplied agentid or agentexecutionid values and do not verif...

EUVD-2026-91703

SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated users from one organization to schedule existing agents belonging to a different organization without proper authorization checks. The endpoi...

Xalgorix Autonomous AI Pentesting Agent 4.6.136

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

PT-2026-104369

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, save agent as template and publish template in superagi/controllers/agent template.py accept caller-supplied agent id or agent execution id values and do n...

PT-2026-104363

In SuperAGI v0.0.14 and prior, controller endpoints /api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit schedule, /api/agents/stop schedule allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different...

PT-2026-104365

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, create agent execution and create agent run in superagi/controllers/agent execution.py accept a caller-supplied agent id and fail to verify that the referenced...

EUVD-2026-91759

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, saveagentastemplate and publishtemplate in superagi/controllers/agenttemplate.py accept caller-supplied agentid or agentexecutionid values and do not verif...

PT-2026-105676

These are all security issues fixed in the pi-coding-agent-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-51904

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...

CVE-2026-51914

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, saveagentastemplate and publishtemplate in superagi/controllers/agenttemplate.py accept caller-supplied agentid or agentexecutionid values and do not verif...

CVE-2026-51904: Undefined Security Weakness

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...