Malicious code in multiturn-prompts-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in financial-research-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47672 Malicious code in financial-research-agent (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-10540 Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...

CVE-2025-5494 Privilege Escalation

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central is affected by an improper privilege management flaw in the agent setup. The issue impacts Endpoint Central versions up to 11.4.2500.25 and up to 11.4.2508.13. Root cause: improper privilege handling during the agent installation process, enabling local priv...

CVE-2025-5494 Privilege Escalation

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

Malicious code in shop-chat-agent (npm)

The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...

MAL-2025-47567 Malicious code in shop-chat-agent (npm)

The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...

Malicious Package

Overview shop-chat-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-57407

A stored cross-site scripting XSS vulnerability in the Admin Log Viewer of S-Cart =10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser when they view the security log page, which...

PT-2025-39370

Name of the Vulnerable Software and Affected Versions ZohoCorp ManageEngine Endpoint Central versions through 11.4.2500.25 ZohoCorp ManageEngine Endpoint Central versions through 11.4.2508.13 Description An improper privilege management issue exists in the agent setup of ZohoCorp ManageEngine...

PhishLumos: an Adaptive Multi-Agent System for Proactive Phishing Campaign Mitigation

Phishing attacks are a significant societal threat, disproportionately harming vulnerable populations and eroding trust in essential digital services. Current defenses are often reactive, failing against modern evasive tactics like cloaking that conceal malicious content. To address this, we...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ko, bom, cluster-api-provider-vsphere, kubernetes-dashboard-web, prometheus, nri-nginx, docker-machine-driver-harvester, amazon-cloudwatch-agent-operator, kapp, nova, nri-consul, controller-gen, harbor-cli, cni-plugins, falcoctl, wait-for-port, ini-file,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: azure-service-operator, flux, step-kms-plugin, gatekeeper, cluster-api-helm-controller, node-problem-detector, plugin-barman-cloud, dragonfly-operator, controller-gen, glow, monstache, cert-manager, consul, prometheus, cluster-api-azure-controller, nri-consul,...

Microsoft Hybrid Agent Installed (Windows)

Binary data microsofthybridagentwininstalled.nbin...

The vulnerability of the software for secure data collection regarding the status of Tenable Agent, due to incorrect default permissions, allows a perpetrator to execute arbitrary code.

The vulnerability of the software used for securely collecting status data about Tenable Agent is related to incorrect default permissions. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability

A stored cross-site scripting XSS vulnerability in the Admin Log Viewer of S-Cart =10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser when they view the security log page, which...