PT-2025-28522 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to improper control of generation of code, also known as 'code injection', in Azure Monitor Agent. This allows an unauthorized attacker to execute code over...

Microsoft Azure Monitor Agent Installed (Windows)

Binary data microsoftazuremonitoragentwininstalled.nbin...

KLA85524 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Monitor Agent can be exploited remotely to execute...

Microsoft Azure Monitor Agent < 1.35.1 Remote Code Execution (CVE-2025-47988)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.35.1. It is, therefore, affected by a remote code execution vulnerability: - Improper control of generation of code 'code injection' in Azure Monitor Agent allows an unauthorized attacker to execute code over ...

CVE-2025-53536

Roo Code (AI-powered autonomous coding agent) prior to version 3.22.6 is affected. If a victim had the Write auto-approved mode, an attacker who can submit prompts could write to VS Code settings files and trigger code execution. A concrete example is the php.validate.executablePath setting, wher...

Serverless A2A with Spin

Learn how to build serverless agent-to-agent A2A apps with Spin...

CVE-2025-24508

Extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage...

CVE-2025-24508

CVE-2025-24508 affects Broadcom Symantec IT Management Suite via the IT Management Agent secure storage, enabling extraction of Account Connectivity Credentials (ACCs). Root cause described as improper protection/failure to securely restrict access to ACCs in storage, enabling local theft when at...

PT-2025-28127 · Broadcom · Symantec It Management Suite

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns the extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage. Recommendations: At the moment, there is no information about a newer...

A Systematization of Security Vulnerabilities in Computer Use Agents

Computer Use Agents CUAs, autonomous systems that interact with software interfaces via browsers or virtual machines, are rapidly being deployed in consumer and enterprise environments. These agents introduce novel attack surfaces and trust boundaries that are not captured by traditional threat...

OESA-2025-1710 resource-agents security update

Resource agent is a standardized interface for a cluster resource. In translates a standard set of operations into steps specific to the resource or application, and interprets their results as success or failure. Security Fixes: Requests is a HTTP library. Due to a URL parsing issue, Requests...

SAMEP: a Secure Protocol for Persistent Context Sharing across AI Agents

Current AI agent architectures suffer from ephemeral memory limitations, preventing effective collaboration and knowledge sharing across sessions and agent boundaries. We introduce SAMEP Secure Agent Memory Exchange Protocol, a novel framework that enables persistent, secure, and semantically...

Veeam Agent for Microsoft Windows 6.x < 6.3.2.1205 Privilege Escalation (CVE-2025-24287)

The version of Veeam Agent for Microsoft Windows installed on the remote Windows host is affected by a privilege escalation vulnerability: - A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permission...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 1.0.298 Vulnerability Details CVEID:CVE-2025-27817 DESCRIPTION: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache...

AlmaLinux 9 : keylime-agent-rust (ALSA-2025:7313)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:7313 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the AlmaLinux...

CVE-2025-20310

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

CVE-2025-34070

A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged operations. The GFIAgent service, responsible for integration with GFI AppManager, exposes HTTP services on ports 7995 and 7996 without proper...

PT-2025-27656 · Cisco · Cisco Enterprise Chat/Email

Name of the Vulnerable Software and Affected Versions: Cisco Enterprise Chat and Email ECE affected versions not specified Description: A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS...

The Rise of Agentic AI: From Chatbots to Web Agents

Disclaimer: This post isn’t our usual security-focused content – today we’re taking a quick detour to explore the fascinating world of AI agents with the focus of AI web agents. Enjoy this educational dive as a warm-up before we get into the juicy details of AI web agents in our follow-up post...

openSUSE Security Advisory (SUSE-SU-2025:02149-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...