Azure File Sync Agent v20.1 Release – August 2025 (KB5056953)

Security Update for Azure File Sync agent version 20.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.3 Release – August 2025 (KB5063613)

Security Update for Azure File Sync agent version 18.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2025-3831

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties...

CVE-2025-3831

CVE-2025-3831 affects Check Point Harmony SASE agent. The root cause was a shared SFTP key embedded in the software with read/list permissions, granting broader access than intended to log files uploaded during troubleshooting. This could allow unauthorized parties to access logs (potentially inc...

CVE-2025-3831 Exposed SFTP server

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties...

CVE-2025-3831 Exposed SFTP server

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties...

PT-2025-32673 · Check Point · Harmony Sase Agent

Name of the Vulnerable Software and Affected Versions: Harmony SASE agent affected versions not specified Description: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. Recommendations: At the moment, there is no information abou...

Jenkins ssh-agent Docker Image < 6.11.2 SSH Host Key Reuse

According to their self-reported version numbers, the jenkins/ssh-agent docker containers running on the remote web server are affected by an SSH host key reuse vulnerability. In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on...

CVE-2025-55012

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...

CVE-2025-55012 Zed AI Agent Remote Code Execution

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...

CVE-2025-55012

CVE-2025-55012 affects Zed, a multiplayer code editor. Before version 0.197.3, the Zed Agent Panel could allow an AI agent to bypass user permission checks and trigger Remote Code Execution by creating/modifying a project-specific configuration file, enabling arbitrary commands on a victim’s mach...

CVE-2025-55012 Zed AI Agent Remote Code Execution

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...

CVE-2025-55012 Zed AI Agent Remote Code Execution

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...

[SECURITY] Fedora 42 Update: toolbox-0.2-1.fc42

Toolbx is a tool for Linux, which allows the use of interactive command line environments for software development and troubleshooting the host operating system, without having to install software on the host. It is built on top of Podman and other standard container technologies from OCI. Toolbx...

Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation

Insider threats, which can lead to severe losses, remain a major security concern. While machine learning-based insider threat detection ITD methods have shown promising results, their progress is hindered by the scarcity of high-quality data. Enterprise data is sensitive and rarely accessible,...

BlindGuard: Safeguarding LLM-Based Multi-Agent Systems under Unknown Attacks

The security of LLM-based multi-agent systems MAS is critically threatened by propagation vulnerability, where malicious agents can distort collective decision-making through inter-agent message interactions. While existing supervised defense methods demonstrate promising performance, they may be...

Zed 安全漏洞

Zed is an open source code editor from Zed Industries. A security vulnerability exists in versions prior to Zed 0.197.3 that stems from a Zed Agent Panel privilege check bypass that could lead to remote code execution...

PT-2025-32589

Name of the Vulnerable Software and Affected Versions: Zed versions prior to 0.197.3 Description: Zed is a multiplayer code editor. In the Zed Agent Panel, an AI agent could achieve Remote Code Execution RCE by bypassing user permission checks. The AI Agent could exploit a permissions bypass to...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: http-echo, openfga, amass, postgres-operator, gitlab-cng, yunikorn-web, ip-masq-agent, aws-network-policy-agent, kubernetes-dashboard-api, eksctl, snyk-cli, rclone, fulcio, helm-set-status, mods, kubernetes-dashboard-auth, direnv, migrate, k9s, ytt, podman,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gatus, fuse-overlayfs-snapshotter, net-kourier-fips, prometheus-stackdriver-exporter, apache-exporter, kubo-fips, trivy-fips, yunikorn-web, yunikorn-k8shim, steampipe, prometheus-pushgateway-fips, dive, ip-masq-agent, harbor-registry, kubernetes-release,...