CVE-2025-15136 in TRENDnet TEW-800MB Threat Advisories CyberDefenderDecember 29, 2025December 29, 202512 mins0 CVE-2025-15136 is a remote command-injection vulnerability in the management web interface of the TRENDnet TEW-800MB (firmware v1.0.1.0).…continue reading..
CVE-2025-15137 — Critical Command Injection Vulnerability in TRENDnet TEW-800MB Threat Advisories CyberDefenderDecember 29, 2025December 29, 20255 mins0 CVE Identifier: CVE-2025-15137Published: December 28, 2025Severity: High (CVSS ~8.8 / 9.0, depending on source)Exploit Status: Proof-of-Concept (PoC)…continue reading..
CVE-2025-15067: Critical Unauthenticated File Upload Flaw Enabling Web Shell Deployment and Full Server Takeover Threat Advisories AegironDecember 29, 2025December 29, 202510 mins0 Vulnerability Quick Reference Field Details CVE ID CVE-2025-15067 Vulnerability Name Unrestricted Upload of File with Dangerous Type…continue reading..
CVE-2025-52691: SmarterMail Arbitrary File Upload Leading to Remote Code Execution Threat Advisories AegironDecember 29, 2025December 29, 202512 mins0 Executive Vulnerability Summary (At-a-Glance) Vulnerability Classification Product Background SmarterMail is a widely deployed enterprise email platform positioned…continue reading..
CVE-2025-15226: Critical Unauthenticated Arbitrary File Upload Leading to Remote Code Execution in Sunnet WMPro Threat Advisories AegironDecember 29, 2025December 29, 202511 mins0 Executive Vulnerability Summary Field Details CVE ID CVE-2025-15226 Vulnerability Name WMPro Arbitrary File Upload – Unauthenticated RCE…continue reading..
CVE-2025-13417: Low-Privilege Access, High-Impact Database Exposure in WordPress Plugin Organizer Threat Advisories AegironDecember 29, 2025December 29, 202511 mins0 Vulnerability Overview Vulnerability Description Plugin Organizer versions prior to 10.2.4 contain a SQL injection vulnerability within the…continue reading..
CVE-2025-15065: When File Permissions Become a Full System Takeover in KESS Enterprise Threat Advisories AegironDecember 29, 2025December 29, 202513 mins0 Enterprise security failures rarely come from a single mistake. More often, they emerge from a chain of…continue reading..
CVE-2025-68973: Critical Memory Corruption Flaw in GnuPG Armor Parsing Engine Threat Advisories AegironDecember 29, 2025December 29, 202512 mins0 CVE ID: CVE-2025-68973Affected Software: GnuPGAffected Versions: All GnuPG releases up to and including 2.4.8CVSS v3.x Score: 7.8…continue reading..
CVE-2025-15136: TRENDnet TEW-800MB Command Injection Vulnerability Threat Advisories AegironDecember 29, 2025December 29, 20259 mins0 Executive Summary This vulnerability allows unauthenticated remote attackers to execute arbitrary system commands with root privileges on…continue reading..
CVE-2025-68156: When One Expression Can Take Everything Down Threat Advisories AegironDecember 28, 2025December 28, 202510 mins0 A Low-Effort, High-Impact DoS Vulnerability in the Expr Language Engine Vulnerability Summary Affected Products and Platforms Vulnerable…continue reading..
