CVE-2025-49642

Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory...

CVE-2025-13751

A flaw was found in OpenVPN. This vulnerability allows a local denial of service via a local authenticated user connecting to the interactive service agent on Windows and triggering an error. Mitigation Mitigation for this issue is either not available or the currently available options do not me...

Microsoft Azure Monitor Agent < 1.35.9 Remote Code Execution (CVE-2025-62550)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.35.9. It is, therefore, affected by a remote code execution vulnerability: - Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network. CVE-2025-62550 Note that...

CVE-2025-67510 MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare + execute without semantic restrictions. This is consistent with the name “write tool”, but in an LLM/agent context...

Torrent for DiCaprio’s “One Battle After Another” Movie Drops Agent Tesla

Bitdefender researchers warn that the torrent for Leonardo DiCaprio’s One Battle After Another is a trap deploying Agent Tesla malware. Learn how the fileless LOTL attack targets unsuspecting Windows users...

CVE-2025-62550

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

From awareness to action: Building a security-first culture for the agentic AI era

The insights gained from Cybersecurity Awareness Month, right through to Microsoft Ignite 2025, demonstrate that security remains a top priority for business leaders. It serves as a strategic lever for organizational growth, fosters trust, and facilitates the advancement of AI innovation. The Wor...

CVE-2025-12952

A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from agent-level...

CVE-2025-12952 Privilege Escalation in Dialogflow CX via Webhook Admin Role

A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from agent-level...

Advantech WISE-DeviceOn Server Cross-Site Scripting Vulnerability (CNVD-2025-3097401)

Advantech WISE-DeviceOn Server is Advantech's next-generation unified device management solution based on the WISE-DeviceOn platform. Advantech WISE-DeviceOn Server suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied...

CVE-2025-62550

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

CVE-2025-62550

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

CVE-2025-62550 Azure Monitor Agent Remote Code Execution Vulnerability

...

CVE-2025-62550 Azure Monitor Agent Remote Code Execution Vulnerability

...

EUVD-2025-202221

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

CVE-2025-62550

The CVE-2025-62550 entry concerns Microsoft Azure Monitor Agent. Affected component: Azure Monitor Agent; vulnerability type: out-of-bounds write that enables remote code execution when exploited over a network by an authorized attacker. A connected Nessus plugin notes versions prior to 1.35.9 ar...

CVE-2025-53841: Guardicore Local Privilege Escalation Vulnerability

Get technical details about a security vulnerability CVE-2025-53841 in Akamai's Guardicore Platform Agent for Windows and clear guidance on mitigation...

Azure Monitor Agent Remote Code Execution Vulnerability

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

KLA90814 ACE vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2025-62550 Related products Microsoft-Azure Azure-Monitor Azure-Monitor-Agent CVE list CVE-2025-62550...

PT-2025-50175

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An out-of-bounds write issue exists in the Azure Monitor Agent. This allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no...