CVE-2000-1244

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection...

CVE-2009-3497

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0693

Multiple buffer overflows in Wyse Device Manager WDM 4.7.x allow remote attackers to execute arbitrary code via 1 the User-Agent HTTP header to hserver.dll or 2 unspecified input to hagent.exe...

CVE-1999-0013

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user...

UBUNTU-CVE-2025-1712

Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...

CVE-2025-1712 Arbitrary file write with vcrtrace

Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...

The vulnerability of the Zabbix Agent component of the Zabbix IT infrastructure monitoring system allows a attacker to cause a service failure.

The vulnerability of the Zabbix Agent component in the IT infrastructure monitoring system relates to reading memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability in Checkmk versions prior to 2.4.0p1, prior to 2.3.0p32, prior to 2.2.0p42, and version 2.1.0, which stems from a parameter injection in a special agent configuration allows an authenticated attacker to write arbitra...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 1.0.295 Vulnerability Details CVEID:CVE-2025-0395 DESCRIPTION: When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space...

CVE-2025-4971

Broadcom Automic Automation Agent Unix versions 24.3.0 HF4 and 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges...

From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents

The growing adoption of large language models LLMs has led to a new paradigm in mobile computing--LLM-powered mobile AI agents--capable of decomposing and automating complex tasks directly on smartphones. However, the security implications of these agents remain largely unexplored. In this paper,...

CVE-2025-4971

CVE-2025-4971 affects Broadcom Automic Automation Agent on Unix versions < 24.3.0 HF4 and

CVE-2025-4971 Broadcom Automic Automation Agent Unix privilege escalation

Broadcom Automic Automation Agent Unix versions 24.3.0 HF4 and 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges...

CVE-2025-4971 Broadcom Automic Automation Agent Unix privilege escalation

Broadcom Automic Automation Agent Unix versions 24.3.0 HF4 and 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges...

MAL-2025-4009 Malicious code in logdna-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e677b0469d410d4bebb15cebcba6f551b7f4dd27c9b05e9e3162d6abf87f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logdna-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e677b0469d410d4bebb15cebcba6f551b7f4dd27c9b05e9e3162d6abf87f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 Automic Automation Agent Unix Privilege Escalation

An agent configured to run in privileged mode using the SetUID-Bit can be used to escalate privileges, by supplying an ini file with the "authentication" option set to "PAM" and the "libName" option set to a shared object file controlled by the attacker. The shared object will be loaded in an...

PT-2025-22116 · Broadcom · Automic Automation Agent

Name of the Vulnerable Software and Affected Versions: Broadcom Automic Automation Agent Unix versions 24.3.0 HF4 and 21.0.13 HF1 Description: The issue allows low-privileged users with execution rights on the agent executable to escalate their privileges. This is a privilege escalation issue tha...

Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction

LLM-based autonomous agents possess capabilities such as reasoning, tool invocation, and environment interaction, enabling the execution of complex multi-step tasks. The internal reasoning process, i.e., thought, of behavioral trajectory significantly influences tool usage and subsequent actions...

CVE-2024-8201

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer RAID Agent component.This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00...