CVE-2026-0830: Developer Workstations at Risk from Kiro IDE GitLab Command Injection Vulnerabilities AegironJanuary 11, 2026January 11, 20267 mins0 Vulnerability Summary Field Details CVE ID CVE-2026-0830 Vulnerability Type Command Injection (Improper Input Validation) Affected Component Kiro…continue reading..
CVE-2025-15501 & CVE-2025-15500: Critical Unauthenticated OS Command Injection in Sangfor O&M Enabling Remote Root-Level System Takeover Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 Affected Product Information Product Vendor Component Typical Exposure Sangfor O&M Platform Sangfor Operations & Maintenance Management Service…continue reading..
CVE-2026-22584: Silent Code Execution Through Trusted Data Files in Salesforce Uni2TS Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 CVE ID: CVE-2026-22584Product Affected: Salesforce Uni2TS (Universal Integration to Transformation Service)Vulnerability Type: Code Injection due to unsafe…continue reading..
CVE-2026-22600: Silent Data Leak Through OpenProject PDF Export – When SVGs Turn Reports into File Disclosure Weapons Vulnerabilities AegironJanuary 11, 2026January 11, 20268 mins0 Vulnerability Name: OpenProject PDF Export SVG/ImageMagick Local File Read (LFR)CVE ID: CVE-2026-22600Affected Product: OpenProject (PDF export functionality)Component:…continue reading..
Silent Pickle, Full System Takeover: Critical RCE Bypasses in Fickling Vulnerabilities AegironJanuary 11, 2026January 11, 20268 mins0 Product: Fickling Fickling is a Python security library designed to analyze and restrict unsafe behavior in serialized…continue reading..
CVE-2026-22688: Critical WeKnora MCP stdio Command Injection Enabling Remote System Takeover Vulnerabilities AegironJanuary 11, 2026January 11, 20268 mins0 Vulnerability Identifier CVE ID: CVE-2026-22688 Vulnerability Type Command Injection (OS Command Execution)CWE: CWE-78 – Improper Neutralization of…continue reading..
CVE-2025-62235 & CVE-2025-53470: Silent BLE Trust Hijack and Memory Disclosure in Apache NimBLE Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 Apache NimBLE is a lightweight Bluetooth Low Energy (BLE) stack widely used in embedded and IoT environments.…continue reading..
CVE-2025-65091: Critical XWiki Full Calendar Macro SQL Injection Allowing Unauthenticated Database Access & Denial-of-Service Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 Vulnerability Overview (At a Glance) CVE ID: CVE-2025-65091Product: XWiki – Full Calendar (macro-fullcalendar)Affected Component: Calendar.JSONServiceVulnerability Type: SQL…continue reading..
MuddyWater Deploys RustyWater RAT via Spear-Phishing Campaigns Across Middle East Sectors CyberSecurity News CyberDefenderJanuary 11, 2026January 11, 20263 mins0 MuddyWater has launched a new remote access trojan (RAT) dubbed RustyWater, deploying it through targeted spear-phishing campaigns…continue reading..
CVE-2025-14598: Critical SQL Injection in BeeS BET Portal Enabling Full Database Takeover & Potential Server Compromise Vulnerabilities AegironJanuary 10, 2026January 10, 20268 mins0 CVE-2025-14598 – BeeS BET Portal Vulnerability Type: SQL InjectionAffected Component: BeeS BET (BET e-Portal) – Authentication /…continue reading..
