Arbitrary Code Injection

Ray is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient validation of the User-Agent header combined with lack of protection against DNS rebinding attacks, which allows an attacker to execute arbitrary code on a developer’s system via a malicious website or...

Insecure Deserialization

Modular is vulnerable to Insecure Deserialization. The vulnerability is due to insecure deserialization when the --experimental-enable-kvcache-agent feature is enabled, allowing attackers to supply crafted serialized data that can be processed by the server and lead to arbitrary code execution...

crossbow-agent

🤖 crossbow-agent - The Smart Way to Secure Your System 🚀 G...

monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2025-67726 via tornado (4.2.1)

tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2025-67726 Source advisory: OSV:PYSEC-2025-267...

monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2025-67725 via tornado (4.2.1)

tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2025-67725 Source advisory: OSV:PYSEC-2025-266...

monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2025-67724 via tornado (4.2.1)

tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2025-67724 Source advisory: OSV:PYSEC-2025-265...

How Akamai Is Powering Trust in Tomorrow’s AI-Driven Ecosystem

Discover how Akamai powers secure, trusted AI interactions by verifying bots and agents, enabling adaptive trust, and supporting new monetization opportunities...

tech.powerjob:powerjob-client (4.0.0), tech.powerjob:powerjob-official-processors (1.1.0) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.0.0)

tech.powerjob:powerjob-common MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.0.0 - tech.powerjob:powerjob-official-processors 1.1.0 -...

tech.powerjob:powerjob-client (4.1.0), tech.powerjob:powerjob-official-processors (1.2.0) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.1.0)

tech.powerjob:powerjob-common MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.1.0 - tech.powerjob:powerjob-official-processors 1.2.0 -...

tech.powerjob:powerjob-client (4.1.1), tech.powerjob:powerjob-official-processors (1.2.1) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.1.1)

tech.powerjob:powerjob-common MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.1.1 - tech.powerjob:powerjob-official-processors 1.2.1 -...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.2.01, <=2023.3.01), tech.powerjob:powerjob-client (4.2.0) +4 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.2.0)

tech.powerjob:powerjob-common MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob =2023.2.01, =2023.3.01 -...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.02), tech.powerjob:powerjob-client (4.2.1) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.2.1)

tech.powerjob:powerjob-common MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.02 - tech.powerjob:powerjob-client 4.2.1 ...

CVE-2025-49642

Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory...

CVE-2025-13751

A flaw was found in OpenVPN. This vulnerability allows a local denial of service via a local authenticated user connecting to the interactive service agent on Windows and triggering an error. Mitigation Mitigation for this issue is either not available or the currently available options do not me...

Microsoft Azure Monitor Agent < 1.35.9 Remote Code Execution (CVE-2025-62550)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.35.9. It is, therefore, affected by a remote code execution vulnerability: - Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network. CVE-2025-62550 Note that...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

CVE-2025-67510 MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare + execute without semantic restrictions. This is consistent with the name “write tool”, but in an LLM/agent context...

Torrent for DiCaprio’s “One Battle After Another” Movie Drops Agent Tesla

Bitdefender researchers warn that the torrent for Leonardo DiCaprio’s One Battle After Another is a trap deploying Agent Tesla malware. Learn how the fileless LOTL attack targets unsuspecting Windows users...

CVE-2025-62550

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

From awareness to action: Building a security-first culture for the agentic AI era

The insights gained from Cybersecurity Awareness Month, right through to Microsoft Ignite 2025, demonstrate that security remains a top priority for business leaders. It serves as a strategic lever for organizational growth, fosters trust, and facilitates the advancement of AI innovation. The Wor...