Lucene search
+L

88 matches found

Github Security Blog
Github Security Blog
•added 2026/10/26 12:08 a.m.•3 views

Malware in monitoring-agent

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/04 11:26 p.m.•27 views

Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/04 11:26 p.m.•27 views

MAL-2026-17515 Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

5.8AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/08/15 3:31 a.m.•48 views

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to ngin...

6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/20 5:52 p.m.•18 views

Security Bulletin: IBM Tivoli Monitoring is included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent, is affected by a security vulnerability in Perl

Summary IBM Tivoli Monitoring is included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent and has remediated a vulnerability in the Zlib library. Vulnerability Details CVEID:CVE-2026-4176 DESCRIPTION: Perl versions from 5.9.4 before 5.40.4-RC1, from...

9.8CVSS7.3AI score0.00727EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/03 6:14 a.m.•22 views

Security Bulletin: Vulnerablity in Apache Log4j may affect IBM APM Internet Service Monitoring Agent

Summary There is a vulnerability in the Apache log4j library used by IBM APM Internet Service Monitoring Agent. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer...

6.3CVSS6AI score0.00767EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/01 11:19 a.m.•16 views

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVE-2025-53066 Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP compone...

7.5CVSS6.8AI score0.00694EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/27 12:01 p.m.•17 views

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments

Summary IBM java SDK is used by Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow a remote attacker to cause high confidentiality impact, no...

7.5CVSS6.8AI score0.00694EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2006-2826

Malware in sbrugna...

6.8CVSS6.4AI score0.00473EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-1806

Malware in sbrugna...

7.2CVSS5.8AI score0.00338EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2025/07/08 6:30 a.m.•8 views

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2023-21830, CVE-2023-33850, CVE-2025-4447. Vulnerability Details CVEID:CVE-2023-21830 DESCRIPTION: An unspecified vulnerability ...

7.8CVSS6.5AI score0.0117EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:59 p.m.•20 views

CVE-2022-46156

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token...

7.2CVSS6.4AI score0.00514EPSS
SaveExploits0References1
hivepro
hivepro
•added 2023/11/06 7:11 a.m.•34 views

MuddyWater Returns with a New Spear-Phishing Campaign

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MuddyWater, the Iranian nation-state actor, has been identified in a new spearphishing campaign targeting two Israeli entities and deploying a legitimate remote administration tool known as N-able Advanc...

7.3AI score
SaveExploits0
Veracode
Veracode
•added 2022/12/01 4:41 a.m.•56 views

Information Disclosure

github.com/grafana/synthetic-monitoring-agent is vulnerable to information disclosure.The vulnerability exists in multiple functions due to default installation of synthetic-monitoring-agent which allows an attacker to communicate with the Synthetic Monitoring API via a debugging endpoint...

7.2CVSS5.6AI score0.00514EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2022/11/30 12:00 a.m.•22 views

Grafana security vulnerabilities

Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. A security vulnerability exists in Grafana synthetic-monitoring-agent, which stems from the fact that i...

7.2CVSS6.5AI score0.00514EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/30 12:00 a.m.•9 views

CVE-2022-46156: Active Debug Code

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token...

7.2CVSS8AI score0.00514EPSS
SaveExploits0References3
Mend
Mend
•added 2022/11/30 12:00 a.m.•13 views

CVE-2022-46156

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token...

7.2CVSS0.00514EPSS
SaveExploits0References10
IBM Security Bulletins
IBM Security Bulletins
•added 2020/08/12 3:46 a.m.•36 views

Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-9327)

Summary In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations. Vulnerability Details CVEID: CVE-2020-9327 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a NULL pointer...

7.5CVSS1.9AI score0.03727EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2020/06/07 9:15 p.m.•24 views

CVE-2020-13912

SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...

7.3CVSS7.2AI score0.01053EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/07 9:15 p.m.•21 views

Design/Logic Flaw

SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file...

6CVSS7.2AI score0.01053EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder