CVE-2026-54519

AI Agent Automation (npm package backend, repo vmDeshpande/ai-agent-automation) had missing ownership checks in backend/src/controllers/memory.controller.js. The functions listMemories, deleteMemory, and clearAgentMemory accepted a caller-supplied agentId or memory _id without verifying that the ...

EUVD-2026-82580

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...

CVE-2026-54519 AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...

CVE-2026-54519 AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...

EUVD-2006-3426

Malware in sbrugna...

CVE-2022-23169

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

CVE-2022-23169

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

CVE-2022-23169

The CVE-2022-23169 entry maps to Amodat Mobile Application Gateway SQL injection. Affected versions: prior to 7.12.00.09. The vulnerability stems from lack of input validation in the agentid SQL statement, allowing an attacker who is authenticated to the admin panel to craft a SQL payload and exe...

Amodat Mobile Application Gateway SQL注入漏洞

Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...

CVE-2022-23169: Improper Neutralization of Special Elements used in an SQL Command

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

CVE-2022-23169

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

CVE-2019-19650

Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function...

CVE-2019-19650

Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function...

PT-2019-15902 · Zoho · Zoho Manageengine Applications Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions prior to 13640 Description: The issue allows for a remote authenticated SQL injection attack. This is achieved via the agentid parameter in the Agent servlet, which affects the Agent.java proces...

CVE-2019-19650: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function...

RLSWordPressSearch - register.php agentid Parameter SQL Injection

The RLSWordPressSearch WordPress plugin was affected by a register.php agentid Parameter SQL Injection security vulnerability...

Auto Dealer - SQL Injection

----------------------------Information------------------------------------------------ +Name : Auto Dealer = SQL Injection Vulnerability Proof of Concept +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auto Dealer +Price : $24.95 +Language :PHP +Discovered by Easy Laster...

CVE-2006-6450: Undefined Security Weakness

Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management ZPM before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the 1 agentid and 2 pass parameters...

CVE-2006-3430: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checkprofile.asp in 1 PatchLink Update Server PLUS before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and 2 Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the 1 listingid parameter to a images.php, b indexother.php, or c requestinfo.php; 2 propertyid parameter to d searchlookup.php, 3 id parameter to e images.php, or...