Aegiron, Author at - Page 77 of 86

CVE-2025-37164: Unauthenticated Remote Code Execution in HPE OneView

Vulnerabilities

AegironDecember 20, 2025December 20, 20257 mins0

Vulnerability Summary High-Level Summary CVE-2025-37164 is a critical security flaw in HPE OneView that allows a remote…

continue reading..

When YouTube Becomes the Vector: Malware Delivered Through Trusted Content

Latest Cyber Attack

AegironDecember 20, 2025December 20, 202510 mins0

Executive Summary A widespread malware campaign is actively abusing YouTube videos and cracked software downloads to infect…

continue reading..

ICSA-25-352-08 – Axis Communications Camera Systems

Vulnerabilities

AegironDecember 19, 2025December 20, 20255 mins0

ICSA-25-352-08 Axis Communications Camera Systems Release Date: December 19, 2025Severity: CriticalCVSS v3.1 Score: 9.0 Overview CISA has…

continue reading..

ICSA-25-352-02 – Schneider Electric EcoStruxure Foxboro DCS Advisor

Threat Advisories

AegironDecember 19, 2025December 19, 20255 mins0

ICSA-25-352-02 Schneider Electric EcoStruxure Foxboro DCS Advisor Release Date: December 18, 2025Severity: CriticalCVSS v3.1 Score: 9.8 Overview…

continue reading..

CVE-2025-68461: Exploiting SVG Animation to Hijack Roundcube Sessions

Threat Advisories

AegironDecember 19, 2025December 22, 202511 mins0

Vulnerability Summary Vulnerability Name: Cross-Site Scripting via SVG Animate TagCVE ID: CVE-2025-68461Severity: HighCVSS Score: 7.2CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NCWE…

continue reading..

CVE-2025-14733: Zero-Day IKEv2 Flaw Enabling Remote WatchGuard Firewall Takeover

Threat Advisories

AegironDecember 19, 2025December 19, 20259 mins0

Vulnerability Summary Vulnerability Name: Out-of-Bounds Write in iked ProcessCVE ID: CVE-2025-14733CVSS v3.1 Score: 9.3CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSeverity: CriticalExploitability:…

continue reading..

CVE-2025-12480: Zero-Day RCE Gladinet Triofox Access Flaw Enables Full SYSTEM Takeover of Exposed Servers

Threat Advisories

AegironDecember 19, 2025December 19, 202511 mins0

Vulnerability Summary Vulnerability Name: Gladinet Triofox Improper Access Control Leading to Remote Code ExecutionCVE ID: CVE-2025-12480CVSS Score:…

continue reading..

Hidden in Plain Sight: How a Windows UI Flaw Enabled a Diplomatic PlugX Espionage Campaign

Cyber Threat Intelligence

AegironDecember 19, 2025December 19, 202519 mins0

Executive Summary Between mid-2025 and December 2025, a China-nexus threat actor tracked as UNC6384 conducted a sustained…

continue reading..

ShadowPad Exploiting WSUS: How a Trusted Update Server Becomes a Silent Backdoor

Malware

AegironDecember 19, 2025December 19, 202511 mins0

Overview ShadowPad is a long-standing, advanced backdoor designed for stealth, persistence, and full remote control of compromised…

continue reading..

CVE-2025-61677: A Silent Code Execution Risk Inside DataChain’s AI Data Core

Threat Advisories

AegironDecember 19, 2025December 19, 202512 mins0

Vulnerability name: DataChain Data Storage – Unsafe Deserialization Leading to Remote Code ExecutionCVE ID: CVE-2025-61677CVSS v3 score:…

continue reading..

1
…
75
76
77
78
79
…
86