PT-2026-59553

Summary The AgentOS deployment platform exposes a GET /api/agents endpoint that returns agent names, roles, and the first 100 characters of agent system instructions to any unauthenticated caller. The AgentOS FastAPI application has no authentication middleware, no API key validation, and default...

CVE-2025-43772

Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-servic...

Milesight DeviceHub Path Traversal Code Execution

The vulnerability of the MileSight DeviceHub deployment platform exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Milesight DeviceHub DoS

The vulnerability of the MileSight DeviceHub deployment platform exists due to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Octopus Server Cross-Site Script Vulnerabilities

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server. An attacker could exploit the vulnerability to perform cross-site scripting attacks...

Octopus Server Information Disclosure Vulnerability

Octopus Server is an automated deployment platform. An information disclosure vulnerability exists in Octopus Server versions 2022.2.6729 and later through 2022.2.7965 and 2022.3.348 and later through 2022.3.9163. An attacker can exploit this vulnerability to obtain sensitive information...

Octopus Server Cross-Site Script Vulnerabilities

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server, which can be exploited by an attacker to add a cross-site scripting payload to a related link...

Octopus Server security vulnerabilities

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server. No information about the vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...