The vulnerability of the wazuh-agent package from the security monitoring and threat detection platform Wazuh allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the wazuh-agent package from the security monitoring and threat detection platform Wazuh is related to incorrect default permissions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

EUVD-2024-17008

Malicious code in bioql PyPI...

EUVD-2024-35565

Malicious code in bioql PyPI...

CVE-2024-1243 Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...