Lucene search
+L

90 matches found

Github Security Blog
Github Security Blog
•added 2026/10/26 12:08 a.m.•11 views

Malware in monitoring-agent

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/10/05 6:34 p.m.•12 views

Malicious Package

Overview monitoring-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/05 12:30 a.m.•11 views

Malicious code in monitoring-agent (npm)

Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP request to a hardcoded author-controlled host at...

5.9AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/04 11:26 p.m.•27 views

Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/04 11:26 p.m.•27 views

MAL-2026-17515 Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

5.8AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/08/15 3:31 a.m.•48 views

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to ngin...

6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/20 5:52 p.m.•19 views

Security Bulletin: IBM Tivoli Monitoring is included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent, is affected by a security vulnerability in Perl

Summary IBM Tivoli Monitoring is included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent and has remediated a vulnerability in the Zlib library. Vulnerability Details CVEID:CVE-2026-4176 DESCRIPTION: Perl versions from 5.9.4 before 5.40.4-RC1, from...

9.8CVSS7.3AI score0.0074EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/03 6:14 a.m.•24 views

Security Bulletin: Vulnerablity in Apache Log4j may affect IBM APM Internet Service Monitoring Agent

Summary There is a vulnerability in the Apache log4j library used by IBM APM Internet Service Monitoring Agent. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer...

6.3CVSS6AI score0.00767EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/01 11:19 a.m.•16 views

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVE-2025-53066 Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP compone...

7.5CVSS6.7AI score0.00694EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/27 12:01 p.m.•17 views

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments

Summary IBM java SDK is used by Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow a remote attacker to cause high confidentiality impact, no...

7.5CVSS6.7AI score0.00694EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2006-2826

Malware in sbrugna...

6.8CVSS6.4AI score0.00473EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-1806

Malware in sbrugna...

7.2CVSS5.8AI score0.00338EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2025/07/08 6:30 a.m.•8 views

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2023-21830, CVE-2023-33850, CVE-2025-4447. Vulnerability Details CVEID:CVE-2023-21830 DESCRIPTION: An unspecified vulnerability ...

7.8CVSS6.5AI score0.0117EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:59 p.m.•20 views

CVE-2022-46156

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token...

7.2CVSS6.4AI score0.00514EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•13 views

Update Rollup 8.0.11072.0 for Microsoft Monitoring Agent (KB 4047288)

Update Rollup 8.0.11072.0 for Microsoft Monitoring Agent KB 4047288 Applies To System Center 2016 Operations Manager System Center 2012 R2 Operations Manager Summary This article describes the issues that are fixed and the improvements that are included in update rollup 8.0.11072.0 for Microsoft...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•16 views

Update rollup 8.0.11049.0 for Microsoft Monitoring Agent (KB4015075)

Update rollup 8.0.11049.0 for Microsoft Monitoring Agent KB4015075 Applies To System Center 2012 R2 Operations Manager Summary This article describes the issues that are fixed in update rollup 8.0.11049.0 for the Microsoft Monitoring Agent. It also contains installation instructions for the updat...

6.2AI score
SaveExploits0
hivepro
hivepro
•added 2023/11/06 7:11 a.m.•34 views

MuddyWater Returns with a New Spear-Phishing Campaign

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MuddyWater, the Iranian nation-state actor, has been identified in a new spearphishing campaign targeting two Israeli entities and deploying a legitimate remote administration tool known as N-able Advanc...

7.3AI score
SaveExploits0
Veracode
Veracode
•added 2022/12/01 4:41 a.m.•57 views

Information Disclosure

github.com/grafana/synthetic-monitoring-agent is vulnerable to information disclosure.The vulnerability exists in multiple functions due to default installation of synthetic-monitoring-agent which allows an attacker to communicate with the Synthetic Monitoring API via a debugging endpoint...

7.2CVSS5.6AI score0.00514EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2022/11/30 12:00 a.m.•13 views

CVE-2022-46156

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token...

7.2CVSS0.00514EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/30 12:00 a.m.•9 views

CVE-2022-46156: Active Debug Code

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token...

7.2CVSS8AI score0.00514EPSS
SaveExploits0References3
Rows per page
Query Builder