20533 matches found
MAL-2025-47726 Malicious code in sendbird-ai-agent-samples (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47690 Malicious code in multiturn-prompts-agent (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in multiturn-prompts-agent (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47672 Malicious code in financial-research-agent (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in financial-research-agent (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-10540 Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM
iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...
CVE-2025-5494 Privilege Escalation
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494 Privilege Escalation
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central is affected by an improper privilege management flaw in the agent setup. The issue impacts Endpoint Central versions up to 11.4.2500.25 and up to 11.4.2508.13. Root cause: improper privilege handling during the agent installation process, enabling local priv...
Malicious code in shop-chat-agent (npm)
The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...
MAL-2025-47567 Malicious code in shop-chat-agent (npm)
The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...
Malicious Package
Overview shop-chat-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-57407
A stored cross-site scripting XSS vulnerability in the Admin Log Viewer of S-Cart =10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser when they view the security log page, which...
PT-2025-39370
Name of the Vulnerable Software and Affected Versions ZohoCorp ManageEngine Endpoint Central versions through 11.4.2500.25 ZohoCorp ManageEngine Endpoint Central versions through 11.4.2508.13 Description An improper privilege management issue exists in the agent setup of ZohoCorp ManageEngine...
PhishLumos: an Adaptive Multi-Agent System for Proactive Phishing Campaign Mitigation
Phishing attacks are a significant societal threat, disproportionately harming vulnerable populations and eroding trust in essential digital services. Current defenses are often reactive, failing against modern evasive tactics like cloaking that conceal malicious content. To address this, we...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, nri-f5, envconsul, cluster-api-provider-vsphere, dive, thanos-operator, tempo, libnvidia-container, yunikorn-k8shim, nri-mysql, nats-server-config-reloader, steampipe, cloud-sql-proxy, tkn, witness, nri-consul, conftest, nri-apache,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: nri-mysql, kubernetes-csi-driver-nfs, docker-machine-driver-harvester, karpenter, rke2-runtime, gobuster, nri-apache, eksctl, lazydocker, witness, neuvector, helm-push, emissary, k8sgpt, cloud-provider-vsphere, gatekeeper, chart-testing, mongo-tools, argo-events,...
