Using Veeam Agents with Xen Orchestra (Vates XCP-NG and XenServer)

Purpose This article documents how to use Veeam Agent for Microsoft Windows and Veeam Agent for Linux , managed by Veeam Backup & Replication, to protect virtual machines in XenServer and XCP-NG environments that are managed by Xen Orchestra. While these hypervisors are not directly supported for...

The vulnerability of the software tool for collecting network and application performance data from Cisco ThousandEyes Endpoint Agent, related to errors in the certificate validation process, allows attackers to escalate their privileges.

The vulnerability of the software tool for collecting network performance and Cisco ThousandEyes Endpoint Agent application data is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Exploit for Improper Check for Unusual or Exceptional Conditions in Jenkins

Intro This is an exploit for CVE-2024-43044, an arbitrary fil...

CVE-2023-28354

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

CVE-2023-28354

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

Opsview Monitor Agent 安全漏洞

Opsview Monitor Agent is a monitoring platform agent program from Opsview. A security vulnerability exists in Opsview Monitor Agent version 0.3.9.700 2022-09-28 and earlier, which stems from the ability of an unauthenticated remote attacker to invoke the checknrpe specified plug-in, which allows...

CVE-2023-28354

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call checknrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NR...

PT-2025-1386 · Opsview · Opsview Monitor Agent

Name of the Vulnerable Software and Affected Versions: Opsview Monitor Agent version 6.8 Description: A problem was discovered in Opsview Monitor Agent where an unauthenticated remote attacker can call check nrpe against affected targets, specifying known NRPE plugins. In default installations,...

Infoblox BloxOne 安全漏洞

Infoblox BloxOne is a lightweight mobile agent from Infoblox USA. redirects DNS traffic from remote devices to the BloxOne Threat Defense Cloud. A security vulnerability exists in Infoblox BloxOne version v2.4 that stems from flawed business logic...

CVE-2023-28354

An issue in Opsview Monitor Agent 6.8 allows an unauthenticated remote attacker to call NRPE via check_nrpe and escape NRPE plugin execution by sending command control characters, enabling remote execution of commands on the target as NT_AUTHORITY\SYSTEM. This is documented in multiple sources (N...

CVE-2025-20126 Cisco ThousandEyes Endpoint Agent Certificate Validation Vulnerability

A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow an unauthenticated, remote attacker to intercept or manipulate metrics information. This vulnerability exists because the affected software does not properly validate...

CVE-2025-20126

The CVE-2025-20126 vulnerability affects Cisco ThousandEyes Endpoint Agent for macOS and RoomOS, arising from improper certificate validation in the hosted metrics service validation routine. An unauthenticated, remote attacker could intercept or alter metrics communications via a crafted certifi...

Malicious code in @shadowbyte/checkout-telemetry-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3309a46cb7d7602b6b36a782d12752e0b69f409896afc9dd2d9fa4925d65b4a6 The OpenSSF Package Analysis project identified '@shadowbyte/checkout-telemetry-agent' @ 1.0.4 npm as malicious. It is considered malicious...

Cisco ThousandEyes Endpoint Agent 信任管理问题漏洞

Cisco ThousandEyes Endpoint Agent is an endpoint agent program from Cisco USA. A security vulnerability exists in Cisco ThousandEyes Endpoint Agent that stems from not properly validating the certificate of the Managed Metrics Service...

Trend Micro Deep Security Agent Incorrect Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Deep Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Subsequent user interaction on the...

PT-2025-1021 · Cisco · Cisco Thousandeyes Endpoint Agent

Name of the Vulnerable Software and Affected Versions: Cisco ThousandEyes Endpoint Agent for macOS and RoomOS affected versions not specified Description: A vulnerability in the certification validation routines of the affected software could allow an unauthenticated, remote attacker to intercept...

Nessus Agent 2025 Refresh

Binary data nessusagentrefresh2501.nbin...

Smarts Smart Agent interface.php Page SQL Injection Vulnerability

Smarts Smart Agent is a powerful, flexible and scalable tool from Smarts for monitoring wireless network performance and services from the end user's perspective. An SQL injection vulnerability exists in Smarts Smart Agent v1.1.0, which stems from a lack of validation of externally entered SQL...

CVE-2024-55542

Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169, Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895...

CVE-2024-55542

CVE-2024-55542 is a local privilege-escalation in Acronis Cyber Protect 16 (Linux/macOS/Windows) before build 39169 and Acronis Cyber Protect Cloud Agent before build 35895, arising from excessive permissions on the Tray Monitor service. Connected sources confirm the vulnerable components and aff...