HIGH-RISK WINDOWS KERNEL SECURITY MISCONFIGURATION IN ORCA G2 (CVE-2025-64699) ALLOWS SYSTEM-LEVEL COMPROMISE Threat Advisories AegironJanuary 1, 2026January 1, 20268 mins0 Title: Incorrect NULL DACL Applied to Device Object Allows Unauthorized Raw Disk AccessAffected Product: ORCA G2 (Version…continue reading..
CVE-2025-68700: Critical Authenticated Remote Code Execution in RAGFlow Leading to Full Server Compromise Threat Advisories AegironJanuary 1, 2026January 1, 20268 mins0 CVE Identification Severity & Risk Summary Impact: Complete server takeover, equivalent to full root-level compromise depending on…continue reading..
CVE-2025-69288: Authenticated Admins Can Trigger Remote Code Execution in Titra via Unsafe Rule Evaluation Threat Advisories AegironJanuary 1, 2026January 1, 20267 mins0 Vulnerability Overview Severity & Risk Summary This vulnerability allows an authenticated Admin user to execute arbitrary system…continue reading..
CVE-2025-69286 — RAGFlow Authentication Breakdown Allows API Key Derivation from Shared Links Threat Advisories AegironJanuary 1, 2026January 1, 20266 mins0 Vulnerability Overview Severity & Risk Summary This vulnerability completely collapses the trust boundary between shared access and…continue reading..
EMERGING THREAT: CVE-2023-54327 — Actively Exploited Authentication Bypass Enabling Full Takeover of Tinycontrol LAN Controllers Threat Advisories AegironDecember 31, 2025December 31, 202510 mins0 Quick Reference CVE Identifier: CVE-2023-54327Vulnerability Class: Authentication Bypass / Access Control BypassAffected Product: Tinycontrol LAN ControllerAffected Versions:…continue reading..
Old CVEs, Live Airwaves at Risk: Why Legacy SOUND4 Flaws Still Enable Full Remote Takeover Today Threat Advisories AegironDecember 31, 2025December 31, 20256 mins0 Affected Vendor & Products SOUND4Products: IMPACT / FIRST / PULSE / EcoAffected Versions: 2.x and belowDeployment Type:…continue reading..
CVE-2025-15111 to CVE-2025-15114: Four Flaws, One Alarm System — How Lares 4.0 Can Be Silently Disarmed and Taken Over Threat Advisories AegironDecember 31, 2025December 31, 20256 mins0 Affected Product Ksenia Security – Lares 4.0 Home Automation & Alarm SystemAffected Version: 1.6 At-a-Glance Risk Summary…continue reading..
CVE-2022-50691: An Old CVE, a Fresh Threat — Why This Root RCE Still Puts Systems at Risk Today Threat Advisories AegironDecember 31, 2025December 31, 20257 mins0 CVE ID: CVE-2022-50691Affected Platform: MiniDVBLinux (Linux 5.4–based builds)Vulnerable Component: Embedded web interface script /tpl/commands.shCVSS v3.1 Score: 9.8…continue reading..
CVE-2025-50343: Malformed MATLAB Files Can Break Memory Safety and Crash matio-Based Applications Threat Advisories AegironDecember 31, 2025December 31, 202510 mins0 CVE ID: CVE-2025-50343Affected Component: matio (MATLAB MAT-file I/O C library)Affected Versions: 1.5.28 (and potentially earlier releases)Vulnerable Function:…continue reading..
CVE-2025-47411 – Normal User Turns into StreamPipes Admin Threat Advisories CyberDefenderDecember 31, 2025December 31, 202514 mins0 CVE-2025-47411 is a logic/authorization vulnerability in Apache StreamPipes that allows a non-administrator user to manipulate the user…continue reading..
