Aegiron, Author at - Page 78 of 86

CVE-2025-12490: Arbitrary File Write via Path Traversal in pfSense Suricata Package

Vulnerabilities

AegironDecember 19, 2025December 19, 202510 mins0

Vulnerability name: pfSense CE Suricata Package – Arbitrary File Write via Path TraversalCVE ID: CVE-2025-12490CVSS v3 score:…

CVE-2025-55183: React Server Components Leak Internal Server Logic Through Unsafe Serialization

Vulnerabilities

AegironDecember 19, 2025December 19, 202513 mins0

Vulnerability Summary Executive Overview CVE-2025-55183 is an information disclosure vulnerability affecting React Server Components in early React…

CVE-2025-10019: Silent Data Exposure via Broken Authorization in Contact Form Email for WordPress

Vulnerabilities

AegironDecember 19, 2025December 19, 202510 mins0

Vulnerability Summary Overview Contact Form Email is a commonly deployed WordPress plugin used to collect and process…

CVE-2025-67845: Static Asset Escape — Path Traversal Exposure in Mintlify Platform

Vulnerabilities

AegironDecember 19, 2025December 19, 202511 mins0

Vulnerability Summary Overview CVE-2025-67845 is a directory traversal vulnerability affecting the Static Asset Proxy Endpoint of the…

TorrentLoader Campaign — Malicious Payloads Hidden Behind Popular Movie Torrents

Malware

AegironDecember 18, 2025December 18, 202510 mins0

Executive overview TorrentLoader is a malware delivery campaign that abuses public torrent platforms and file-sharing communities to…

Impersonation at Scale: Android Malware Masquerading as Government Services

Malware

AegironDecember 18, 2025December 18, 202511 mins0

Threat Details This threat involves a set of malicious Android applications that disguise themselves as official government…

Malware: Agent Tesla — Phishing-Driven Credential Theft Campaigns Targeting the Travel Sector

Malware

AegironDecember 18, 2025December 19, 20259 mins0

Executive overview Agent Tesla is a well-known information-stealing malware that has been active for years and continues…

Malware: ShadyPanda — Large-Scale Browser Extension Hijacking Operation

Malware

AegironDecember 18, 2025December 19, 20258 mins0

Threat classification Overview ShadyPanda refers to a coordinated, large-scale malicious operation focused on hijacking legitimate browser extensions…

Malware: EtherRAT — React Server Components–Based Remote Access Trojan

Malware

AegironDecember 18, 2025December 19, 202510 mins0

Threat classification Executive summary Security researchers have confirmed that a North Korea–associated threat actor is actively exploiting…

CVE-2025-55681: Local Privilege Escalation in Windows Desktop Window Manager (DWM)

Vulnerabilities

AegironDecember 18, 2025December 19, 20259 mins0

Key Details (Technical Snapshot) Technical Summary (What This Vulnerability Is) CVE-2025-55681 is a memory safety vulnerability in…