CVE-2026-79806

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client...

EUVD-2026-93892

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client...

CVE-2026-79806 Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client...

CVE-2026-79806

The ClearPass Policy Manager OnGuard Linux agent contains a privilege escalation vulnerability that allows an authenticated local user to elevate their privileges. A successful exploit enables a malicious user to gain root privileges on the affected Linux client. No specific root cause, affected ...

hermes

Hermes Hermes 是一个用 Python 编写的轻量级 Linux 代理，专为 Mythic 3.0 及更高版本设计。以众神的信使 Hermes 命名——追求速度与隐秘。 特性 Linux 支持 SOCKS5 代理支持，用于跳板攻击和横向移动 多种 C2 配置文件：HTTP、Notion 使用 RSA-4096 + AES-256-CBC + HMAC-SHA256 的加密密钥交换 EKE AESPSK 支持（预共享密钥，无需密钥交换） 24 个内置命令，涵盖： 侦察 whoami、ps、netstat、ifconfig、systeminfo、env 文件操作...

EUVD-2026-36362

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19...

CVE-2026-45174

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19...

CVE-2026-45174

The vulnerability CVE-2026-45174 affects Idira Endpoint Privilege Manager Linux Agent prior to version 26.5. A local attacker could potentially bypass the agent daemon initialization process, enabling compromise of the daemon initialization sequence. Affected component: Idira EPM Linux Agent; roo...

CVE-2026-45174 Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19...

CVE-2026-45174 Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19...

CVE-2026-45174: Improper Resource Shutdown or Release

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19...

PT-2026-48784

Name of the Vulnerable Software and Affected Versions Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 Description A local attacker can potentially compromise the agent daemon initialization process. Recommendations Update to version 26.5 or later...

Veeam Agent for Linux: Update Blocked by Repository Signing Key Change

Article Applicability This article is intended for customers managing Veeam Agent for Linux 6.3 deployments. Deployments that have already been updated to Veeam Agent for Linux 13, or are being updated to it, are not affected by the repository GPG key change. Challenge When attempting to update...

CVE-2022-23120

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in...

EUVD-2021-23372

Malware in sbrugna...

EUVD-2022-28211

Malicious code in bioql PyPI...

EUVD-2024-23477

Malicious code in bioql PyPI...

EUVD-2022-38893

Malicious code in bioql PyPI...

EUVD-2023-29532

Malicious code in bioql PyPI...

CVE-2024-26291

An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges root/NTAUTHORITY SYSTEM by default attackers are ab...