SuperAGI 代码注入漏洞

SuperAGI is an open source infrastructure application from SuperAGI Open Source. It is used to build components, tools, frameworks and models to implement open source AGI. SuperAGI suffers from a code injection vulnerability that stems from the agent template update API allowing an attacker to...

PT-2025-12233

Name of the Vulnerable Software and Affected Versions modelscope/agentscope version 0.0.6a3 Description A vulnerability in the RpcAgentServerLauncher class allows for remote code execution RCE via deserialization of untrusted data using the dill library. The issue occurs in the...

openSUSE Security Advisory (SUSE-SU-2025:0882-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, opentelemetry-collector-contrib-fips, splunk-otel-collector-fips, grafana-alloy, argo-rollouts, amazon-cloudwatch-agent-fips, grafana-alloy-fips, kargo, eks-distro, kubeflow-pipelines, argo-cd-fips, k8sgpt, argo-workflows, eks-distro-fips,...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, opentelemetry-collector-contrib-fips, splunk-otel-collector-fips, grafana-alloy, argo-rollouts, amazon-cloudwatch-agent-fips, grafana-alloy-fips, kargo, eks-distro, kubeflow-pipelines, argo-cd-fips, k8sgpt, argo-workflows, eks-distro-fips,...

AWS VDP: Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints

The AWS Kendra Intelligent Ranking service was found to incorrectly report the user-agent and network information as "AWS Internal" for four API endpoints that are FIPS endpoints. This issue can lead to the obscuring of request information that may be used to track down an adversary...

RLSA-2024:9243 Moderate: postfix security update

The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: SMTP smuggling vulnerability CVE-2023-51764 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

postfix security update

An update is available for postfix. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The postfix packages provide a Mail Transport Agent MTA, which supports...

CVE-2025-27512 Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods

Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the zincati system user to use the actions org.projectatomic.rpmostree1.deploy to deploy updates to the system and org.projectatomic.rpmostree1.finalize-deployment to reboot the system into the...

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing bsc1239197 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2025:0882-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing bsc1239197...

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing bsc1239197 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2025:0881-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing bsc1239197...

openSUSE Security Advisory (SUSE-SU-2025:0873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Acronis Cyber Protect Cloud Agent lies in its use of an insecure search path, which allows attackers to escalate their privileges.

The vulnerability of Acronis Cyber Protect Cloud Agent is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created DLL...

GHSA-3WGM-2GW2-VH5M vulnerabilities

Vulnerabilities for packages: vcluster, longhorn-share-manager-fips, longhorn-share-manager, rke2-runtime-fips, harvester, spark-operator-fips, kubernetes, argo-cd-fips, azure-container-networking, longhorn-manager-fips, harvester-fips, longhorn-manager...

CVE-2025-1767 vulnerabilities

Vulnerabilities for packages: vcluster, longhorn-share-manager-fips, longhorn-share-manager, rke2-runtime-fips, harvester, spark-operator-fips, kubernetes, argo-cd-fips, azure-container-networking, longhorn-manager-fips, harvester-fips, longhorn-manager...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 291 Vulnerability Details CVEID:CVE-2025-25193 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and...

CVE-2025-1057

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...

CVE-2025-1057 Keylime: keylime registrar dos due to incompatible database entry handling

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...