20585 matches found
CVE-2025-48963
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40296...
CVE-2025-48963
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40296...
CVE-2025-48963
CVE-2025-48963 : Affected product is Acronis Cyber Protect Cloud Agent on Linux, macOS, and Windows with builds before 40296. The issue is a local privilege escalation caused by improper soft link handling. CVSSv3.0 metrics indicate Privileges Required: Low, User Interaction: Required, Attack Vec...
MAL-2025-41526 Malicious code in @twork-data-services/sme-agent-company-relation (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in spoof-user-agent (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41766 Malicious code in spoof-user-agent (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in change-user-agent (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41638 Malicious code in change-user-agent (PyPI)
--- -= Per source details. Do not edit below this line.=-...
PT-2025-35090
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 40734 Description: The issue involves local privilege escalation due to insecure folder permissions. Recommendations: Update Acronis Cyber Protect Cloud Agent Windows to build...
Acronis Cyber Protect Cloud Agent 安全漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent build 40734, which stems from insecure folder permissions that could lead to local elevation of privileges...
CyberSleuth: Autonomous Blue-Team LLM Agent for Web Attack Forensics
Large Language Model LLM agents are powerful tools for automating complex tasks. In cybersecurity, researchers have primarily explored their use in red-team operations such as vulnerability discovery and penetration tests. Defensive uses for incident response and forensics have received...
Checkmk Exchange plugin Freebox v6 agent 安全漏洞
Checkmk Exchange plugin Freebox v6 agent is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Freebox v6 agent that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...
PT-2025-34981
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows versions prior to build 40296 Description: The issue involves local privilege escalation due to improper soft link handling. Recommendations: Update Acronis Cyber Protect Cloud Agent to...
Acronis Cyber Protect Cloud Agent 安全漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent 40296 that stems from improper handling of soft links, which could lead to local elevation of privilege...
Multi-Agent Penetration Testing AI for the Web
AI-powered development platforms are making software creation accessible to a broader audience, but this democratization has triggered a scalability crisis in security auditing. With studies showing that up to 40% of AI-generated code contains vulnerabilities, the pace of development now vastly...
Google Android Information Disclosure Vulnerability (CNVD-2025-19991)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to an obfuscated agent in multiple functions of StatusHint.java and TelecomServiceImpl.java. An attacker could exploit the vulnerability to disclose...
CVE-2025-34160 AnyShare ServiceAgent API Unauthenticated RCE
AnyShare contains a critical unauthenticated remote code execution vulnerability in the ServiceAgent API exposed on port 10250. The endpoint /api/ServiceAgent/startservice accepts user-supplied input via POST and fails to sanitize command-like payloads. An attacker can inject shell syntax that is...
CVE-2025-34160
CVE-2025-34160 affects AnyShare via the ServiceAgent API exposed on port 10250. The endpoint "/api/ServiceAgent/start_service" accepts POST input and fails to sanitize command-like payloads, enabling unauthenticated remote code execution (RCE) when an attacker injects shell syntax that is execute...
CVE-2025-34160 AnyShare ServiceAgent API Unauthenticated RCE
AnyShare contains a critical unauthenticated remote code execution vulnerability in the ServiceAgent API exposed on port 10250. The endpoint /api/ServiceAgent/startservice accepts user-supplied input via POST and fails to sanitize command-like payloads. An attacker can inject shell syntax that is...
