CVE-2025-48959

CVE-2025-48959 affects Acronis Cyber Protect Cloud Agent (Windows) before build 40077. Local privilege escalation due to insecure file permissions is the root cause, with a local attack vector and low privileges required (user interaction required). The CVSSv3.0 base metrics indicate High impact ...

CVE-2025-48959

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40077...

CVE-2025-30415

Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40077, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2025-30415

Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40077, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2025-30415

CVE-2025-30415 affects the Acronis Cyber Protect Cloud Agent across Linux, macOS, and Windows. The issue is a denial of service caused by improper handling of malformed input, with affected builds before 40077. The vulnerability’s CVSS v3.0 base metrics indicate NETWORK attack vector, LOW attack ...

PT-2025-23798 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows versions before build 40077 Description: The issue is related to a denial of service caused by improper handling of malformed input. Recommendations: For Acronis Cyber Protect Cloud Agen...

PT-2025-54831

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions prior to build 39870 Acronis Cyber Protect 16 versions prior to build 39938 Acronis Cyber Protect 15 versions prior to build 41800 Description The software suffers from a flaw allowing sensitive data...

PT-2025-23820 · Cisco · Cisco Thousandeyes Endpoint Agent For Windows

Name of the Vulnerable Software and Affected Versions: Cisco ThousandEyes Endpoint Agent for Windows affected versions not specified Description: The issue is related to improper access controls on files in the local file system of the Cisco ThousandEyes Endpoint Agent for Windows. An...

Langflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Langflow chatbot on the target application. Langflow is an open-source visual framework for building multi-agent and RAG. This detection is included in the AI and LLM category. No source data...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 40077, which stems from improper handling of malformed inputs and could result in a denial of service...

Cisco ThousandEyes Endpoint Agent 路径遍历漏洞

Cisco ThousandEyes Endpoint Agent is an endpoint agent program from Cisco USA. A path traversal vulnerability exists in Cisco ThousandEyes Endpoint Agent, which can be exploited by an attacker to cause the deletion of an arbitrary file, due to a failure of the program to properly filter for...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent 40077, which stems from insecure file permissions that could lead to local elevation of privilege...

ATAG: AI-Agent Application Threat Assessment with Attack Graphs

Evaluating the security of multi-agent systems MASs powered by large language models LLMs is challenging, primarily because of the systems' complex internal dynamics and the evolving nature of LLM vulnerabilities. Traditional attack graph AG methods often lack the specific capabilities to model...

📄 Automic Agent 24.3.0 HF4 Privilege Escalation

Automic Agent version 24.3.0 HF4 suffers from a privilege escalation vulnerability. Exploit Title: Automic Agent 24.3.0 HF4 - Privilege Escalation Date: 26.05.2025 Exploit Author: Flora Schäfer Vendor Homepage: https://www.broadcom.com/products/software/automation/automic-automation Version:...

Automic Agent 24.3.0 HF4 - Privilege Escalation

Exploit Title: Automic Agent 24.3.0 HF4 - Privilege Escalation Date: 26.05.2025 Exploit Author: Flora Schäfer Vendor Homepage: https://www.broadcom.com/products/software/automation/automic-automation Version: /tmp/sh.so 2. Run the ucxjlx6 executable as follows $ ./ucxjlx6 ini=echo -e...

LLM Agents Should Employ Security Principles

Large Language Model LLM agents show considerable promise for automating complex tasks using contextual reasoning; however, interactions involving multiple agents and the system's susceptibility to prompt injection and other forms of context manipulation introduce new vulnerabilities related to...

A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control

Traditional Identity and Access Management IAM systems, primarily designed for human users or static machine identities via protocols such as OAuth, OpenID Connect OIDC, and SAML, prove fundamentally inadequate for the dynamic, interdependent, and often ephemeral nature of AI agents operating at...

VulBinLLM: LLM-Powered Vulnerability Detection for Stripped Binaries

Recognizing vulnerabilities in stripped binary files presents a significant challenge in software security. Although some progress has been made in generating human-readable information from decompiled binary files with Large Language Models LLMs, effectively and scalably detecting vulnerabilitie...

CVE-2025-4412

CVE-2025-4412 concerns macOS: an attacker can use a Launch Agent to load viscosity_openvpn from the Viscosity app bundle and induce a dynamic library load under Viscosity’s TCC identity. This grants limited resource access without entitlements (e.g., not granting camera/mic); access to other reso...

Sparklabs Viscosity 安全漏洞

Sparklabs Viscosity is an OpenVPN client from Sparklabs Australia. A security vulnerability exists in SparkLabs Viscosity versions prior to 1.11.5, which stems from the possibility of exploiting the Launch Agent to load dynamic libraries to gain limited access to resources...