20611 matches found
Acronis Cyber Protect Cloud Agent 安全漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 39904, which stems from an unrestricted resource allocation and could lead to a denial of service attack...
PT-2025-17729 · Acronis · Acronis Cyber Protect Cloud Agent
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39904 Description: The issue is related to a denial of service due to the allocation of resources without limits. Recommendations: For versions prior to build 39904, update to...
Acronis Cyber Protect Cloud Agent 安全漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 39904, which stems from insecure folder permissions that could lead to local elevation of privileges...
PT-2025-17728 · Acronis · Acronis Cyber Protect Cloud Agent
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39904 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For versions prior to build 39904, update to build...
Citrix Cloud VDIs hosted in Azure by Citrix Cloud shut down constantly with user sessions
When creating VDIs from a Master image that are rolled out with MCS into a Azure subscription - Users machines are constantly shutting down - Even when users are logged onto the machines, they consistently get shutdown after several minutes it can vary between 3-5 | 25-30 -The user will see a...
CVE-2025-2767
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability. The specific flaw exist...
CVE-2025-2767
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability. The specific flaw exist...
CVE-2025-2767 Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability. The specific flaw exist...
CVE-2025-2767 Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability. The specific flaw exist...
CVE-2025-2767
CVE-2025-2767 affects Arista NG Firewall. The vulnerability is in the processing of the User-Agent HTTP header, due to lack of validation of user-supplied data, enabling injection of arbitrary script and remote code execution with root privileges. It requires minimal user interaction. Documents r...
CVE-2025-0618
A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even afte...
CVE-2025-0618
CVE-2025-0618 affects Trellix Endpoint Security (HX) Server versions 10.0.2 and earlier. A specially crafted tamper protection event can trigger an unhandled exception in the HX service, causing a persistent denial of service that prevents processing of any further tamper protection events, even ...
CVE-2025-0618
A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even afte...
PT-2025-17605 · Fireeye · Fireeye Edr Agent
Name of the Vulnerable Software and Affected Versions: FireEye EDR agent affected versions not specified Description: A malicious third party could invoke a persistent denial of service issue in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger ...
Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-Based Multi-Agent Debate
Multi-Agent Debate MAD, leveraging collaborative interactions among Large Language Models LLMs, aim to enhance reasoning capabilities in complex tasks. However, the security implications of their iterative dialogues and role-playing characteristics, particularly susceptibility to jailbreak attack...
Wazuh server vulnerable to remote code execution
Summary An unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. The vulnerability can be triggered by anybody with API access compromised dashboard or Wazuh servers in the cluster or, in certain configurations, even by a compromised agent. Details DistributedAPI...
GHSA-HCRC-79HJ-M3QH Wazuh server vulnerable to remote code execution
Summary An unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. The vulnerability can be triggered by anybody with API access compromised dashboard or Wazuh servers in the cluster or, in certain configurations, even by a compromised agent. Details DistributedAPI...
CVE-2025-32955 Harden-Runner Evasion of 'disable-sudo' policy
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Versions from 0.12.0 to before 2.12.0 are vulnerable to disable-sudo bypass. Harden-Runner includes a policy option disable-sudo to prevent the GitHub Actions runner user from using sudo. This is implemente...
Debian dla-4131 : zabbix-agent - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4131 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4131-1 [email protected]...
