CVE-2025-68664: When User Input Masquerades as Trusted LangChain Objects Threat Advisories AegironDecember 24, 2025December 24, 20259 mins0 Overview CVE ID: CVE-2025-68664Affected Product: LangChainVulnerability Type: Serialization Injection / Trust Boundary Bypass Affected Versions: CVSS v3.1…continue reading..
CVE-2025-68667: Unauthenticated Attackers Can Force Matrix Servers to Sign Fake Membership Events Threat Advisories AegironDecember 24, 2025December 24, 202510 mins0 Executive Summary CVE-2025-68667 is a high-risk security vulnerability affecting Continuwuity, a Matrix homeserver written in Rust. The…continue reading..
CVE-2025-68669: Critical Remote Code Execution via Malicious Mermaid Diagrams in 5ire Threat Advisories AegironDecember 24, 2025December 24, 202510 mins0 Quick overview CVE ID: CVE-2025-68669Vulnerability name: 5ire Markdown / Mermaid Remote Code ExecutionSeverity: CriticalCVSS score: 9.6Risk level:…continue reading..
CVE-2025-68696: High-Risk Server-Side Request Forgery in httparty Ruby Library Threat Advisories AegironDecember 24, 2025December 24, 20258 mins0 Overview (At a Glance) What This Vulnerability Means This vulnerability allows an attacker to trick a server…continue reading..
CVE-2025-29970: A Silent Windows Privilege Escalation Lurking in the Brokering File System Threat Advisories AegironDecember 23, 2025December 23, 202510 mins0 Vulnerability Overview Executive Summary CVE-2025-29970 is a local privilege escalation vulnerability caused by a use-after-free condition in…continue reading..
CVE-2025-38352: Kernel-Level Race Condition Enabling Local Privilege Escalation Threat Advisories AegironDecember 23, 2025December 24, 202513 mins0 Vulnerability Overview Executive Summary CVE-2025-38352 is a race condition vulnerability in the Linux kernel, specifically within the…continue reading..
CVE-2025-68613: Critical n8n Remote Code Execution Vulnerability Allowing Full Server Takeover Threat Advisories AegironDecember 23, 2025December 23, 202521 mins0 Quick Facts Attribute Details CVE ID CVE-2025-68613 Severity Critical (CVSS score: 9.9) Affected Product n8n Workflow Automation…continue reading..
CVE-2025-54100: Windows PowerShell Code Execution Risk Due to Improper Processing of External Content Threat Advisories AegironDecember 22, 2025December 22, 202510 mins0 Overview CVE-2025-54100 is a PowerShell command execution flaw that happens when PowerShell processes external content (such as…continue reading..
One Email Is Enough: The Roundcube Webmail Vulnerabilities You Can’t Ignore CyberSecurity News AegironDecember 22, 2025December 22, 20258 mins0 Overview Roundcube Webmail is a long-standing, widely trusted open-source webmail platform used by shared hosting providers, enterprises,…continue reading..
ICSA-25-352-02 – Schneider Electric EcoStruxure Foxboro DCS Advisor Threat Advisories AegironDecember 19, 2025December 19, 20255 mins0 ICSA-25-352-02 Schneider Electric EcoStruxure Foxboro DCS Advisor Release Date: December 18, 2025Severity: CriticalCVSS v3.1 Score: 9.8 Overview…continue reading..
