CVE-2025-68461: Exploiting SVG Animation to Hijack Roundcube Sessions Threat Advisories AegironDecember 19, 2025December 22, 202511 mins0 Vulnerability Summary Vulnerability Name: Cross-Site Scripting via SVG Animate TagCVE ID: CVE-2025-68461Severity: HighCVSS Score: 7.2CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NCWE…continue reading..
CVE-2025-14733: Zero-Day IKEv2 Flaw Enabling Remote WatchGuard Firewall Takeover Threat Advisories AegironDecember 19, 2025December 19, 20259 mins0 Vulnerability Summary Vulnerability Name: Out-of-Bounds Write in iked ProcessCVE ID: CVE-2025-14733CVSS v3.1 Score: 9.3CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSeverity: CriticalExploitability:…continue reading..
CVE-2025-12480: Zero-Day RCE Gladinet Triofox Access Flaw Enables Full SYSTEM Takeover of Exposed Servers Threat Advisories AegironDecember 19, 2025December 19, 202511 mins0 Vulnerability Summary Vulnerability Name: Gladinet Triofox Improper Access Control Leading to Remote Code ExecutionCVE ID: CVE-2025-12480CVSS Score:…continue reading..
CVE-2025-61677: A Silent Code Execution Risk Inside DataChain’s AI Data Core Threat Advisories AegironDecember 19, 2025December 19, 202512 mins0 Vulnerability name: DataChain Data Storage – Unsafe Deserialization Leading to Remote Code ExecutionCVE ID: CVE-2025-61677CVSS v3 score:…continue reading..
CVE-2025-32210: Critical Deserialization Flaw in NVIDIA Isaac Lab Enabling Remote Code Execution Threat Advisories AegironDecember 18, 2025December 18, 20259 mins0 Vulnerability overview CVSS Vector Breakdown This score reflects how easily the issue can be exploited and how…continue reading..
CVE-2025-59374: When a Trusted ASUS Update Turned Into a Silent Backdoor Threat Advisories AegironDecember 18, 2025December 22, 202510 mins0 Vulnerability Name: Embedded Malicious Code in ASUS Live UpdateCVE ID: CVE-2025-59374CVSS v4.0 Score: 9.3 – CriticalCWE: CWE-506…continue reading..
CVE-2025-12885: Stored Script Injection Risk in WordPress Document Embedding Threat Advisories AegironDecember 18, 2025December 19, 202510 mins0 Vulnerability Overview CVE ID: CVE-2025-12885Vulnerability Type: Stored Cross-Site Scripting (XSS)Severity: MediumCVSS v3.1 Score: 6.4Attack Complexity: LowPrivileges Required:…continue reading..
CVE-2025-20393 | Critical Zero-Day RCE in Cisco AsyncOS Actively Exploited Threat Advisories AegironDecember 18, 2025December 18, 20259 mins0 Executive Summary CVE-2025-20393 is a critical, zero-day vulnerability in Cisco AsyncOS Software that affects Cisco Secure Email…continue reading..
CVE-2025-40602: Active Root-Level Takeover Risk in SonicWall SMA 1000 Appliances Threat Advisories AegironDecember 17, 2025December 17, 20258 mins0 Security Advisory Vulnerability Name: CVE-2025-40602Affected Product: SonicWall SMA 1000 SeriesCVSS Score: 8.8Severity: HighExploitable: Yes – Confirmed active…continue reading..
CVE-2025-6558: Weaponized WebGL Input Flaw Enables Chromium GPU Sandbox Escape and Remote Code Execution Threat Advisories AegironDecember 17, 2025December 17, 20259 mins0 Severity: High (CVSS 3.1 Base Score: 8.8)Exploit Status: Actively Exploited in the Wild (Confirmed Zero-Day)Affected Platforms: Windows,…continue reading..
