20433 matches found
CVE-2024-7402 Netskope Client Configuration Tampering with Local MITM
Netskope has identified a potential gap in its agent Netskope Client in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM Man-in-the-Middle activity on the Netskope Client communication channel. A successful exploitation would require...
CVE-2024-7402
CVE-2024-7402 concerns Netskope Client where a malicious insider with administrative privileges can tamper the client configuration via a local MITM on the client-channel. Impact per available data includes temporary or permanent configuration changes and possible removal of the agent, with CVSS ...
SUSE CVE-2025-50738
The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be...
PT-2025-33116 · Netskope · Netskope Client
Name of the Vulnerable Software and Affected Versions: Netskope Client affected versions not specified Description: A malicious insider with administrative privileges can potentially tamper with the Netskope Client configuration by performing a Man-in-the-Middle MITM attack on the Netskope Client...
EulerOS 2.0 SP11 : openssh (EulerOS-SA-2025-1937)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent...
PT-2025-33275
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix Ethernet Modules versions prior to 12.001 Description: A security issue exists in Rockwell Automation ControlLogix Ethernet Modules due to the web-based debugger agent. Connecting to the WDB agent using a...
Rockwell Automation ControlLogix Series 安全漏洞
Rockwell Automation ControlLogix Series is a family of programmable controllers from Rockwell Automation, USA. A security vulnerability exists in Rockwell Automation ControlLogix Series, which stems from a web-based debugger agent that could allow a remote attacker to perform memory dumps and...
PT-2025-33310
Name of the Vulnerable Software and Affected Versions: Amazon ECS agent versions 0.0.3 through 1.97.0 Description: An issue was identified in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the sa...
EulerOS 2.0 SP11 : openssh (EulerOS-SA-2025-1963)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent...
Amazon ECS Container Agent 安全漏洞
Amazon ECS Container Agent is an elastic container service agent software open source by Amazon Web Services. A security vulnerability exists in Amazon ECS Container Agent that stems from the fact that under certain conditions, an introspective server can be accessed by other instances in the sam...
CVE-2025-55012
Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...
CVE-2025-8904 Privilege escalation issue in Amazon EMR Secret Agent component
Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...
CVE-2025-8904 Privilege escalation issue in Amazon EMR Secret Agent component
Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...
K000152964: OpenSSH vulnerability CVE-2025-32728
Security Advisory Description In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. CVE-2025-32728 Impact This vulnerability could lead to exploit of the X11 server, which may allow unintended access...
Extending the OWASP Multi-Agentic System Threat Modeling Guide: Insights from Multi-Agent Security Research
We propose an extension to the OWASP Multi-Agentic System MAS Threat Modeling Guide, translating recent anticipatory research in multi-agent security MASEC into practical guidance for addressing challenges unique to large language model LLM-driven multi-agent architectures. Although OWASP's...
Azure File Sync Agent v20.1 Release – August 2025 (KB5056953)
Security Update for Azure File Sync agent version 20.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v21.1 Release – August 2025 (KB5063486)
Security Update for Azure File Sync agent version 21.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v21.1 Release – August 2025 (KB5063486)
Security Update for Azure File Sync agent version 21.1.0.0. For more details, see the associated Microsoft Knowledge Base article...