27 matches found
OpsGuard-simulation
OpsGuard - Simulations-Dashboard 🖥️ Dies ist das Frontend-UI für OpsGuard. Es dient als visuelles „Gehirn“, um den autonomen SRE-Agenten in Aktion zu demonstrieren. Da OpsGuard ein backend-zentrierter Agent ist, wurde dieses Dashboard entwickelt, um eine Produktionsumgebung zu simulieren und den...
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
...
CVE-2026-62830
CVE-2026-62830 concerns the Azure SRE Agent, where a missing authorization flaw could allow an authenticated, network-based attacker to elevate privileges. The incident is rated critical (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 9.9). Documents identify the root cause as insuffic...
Azure SRE Agent Elevation of Privilege Vulnerability
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...
KLA91190 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
CVE-2026-7022 SmythOS sre HTTP Header AgentRuntime.class.ts AgentRuntime improper authentication
A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the function AgentRuntime of the file packages/core/src/subsystems/AgentManager/AgentRuntime.class.ts of the component HTTP Header Handler. Such manipulation of the argument X-DEBUG-RUN/X-DEBUG-INJ leads to improp...
CVE-2026-7021
SmythOS SRE up to 0.0.15 is affected by CVE-2026-7021 in the Connector Service, specifically via the file packages/sdk/src/LLM/utils.ts. The vulnerability arises from manipulating the baseURL argument, leading to information disclosure. The issue is exploitable remotely and publicly available too...
CVE-2026-7021
A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...
CVE-2026-32173
Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...
CVE-2026-32173
Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...
Azure SRE Agent Information Disclosure Vulnerability
Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...
KLA91000 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure SRE Agent can ...
KLA90966 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure MCP Server can...
Microsoft Azure SRE Agent 授权问题漏洞
Microsoft Azure SRE Agent is a backend agent service provided by Microsoft Corporation in the United States, designed for monitoring, managing, and optimizing the operational status of the Azure platform. There is an authorization issue vulnerability in Microsoft Azure SRE Agent; this vulnerabili...
MAL-2025-46135 Malicious code in sre-shizhan-shouce (npm)
The package sre-shizhan-shouce was found to contain malicious code...
Malicious code in sre-shizhan-shouce (npm)
The package sre-shizhan-shouce was found to contain malicious code...
Malicious code in @etech-flex-sre/ls-loading-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487c2e88510b861b61f2ca278f6341fe808b6113fc956f64320585b8e83ca3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Measures Healthcare Providers Can Take to Mitigate Disruptions
Earlier this month, an internet outage affected public healthcare clusters in Singapore, including major hospitals and polyclinics, lasting more than seven hours from 9:20 am. Investigations identified that a distributed denial-of-service DDoS attack was the cause of the online service outage. DD...