Critical Ivanti EPMM Flaw Allows Hackers to Take Over Systems Remotely Without Login Vulnerabilities AegironFebruary 4, 2026February 4, 20267 mins0 Ivanti Endpoint Manager Mobile — Unauthenticated Remote Code Execution Product: Ivanti Endpoint Manager Mobile (EPMM)Component(s) impacted: In-House…continue reading..
CVE-2024-5986: Critical H2O-3 Flaw Enables Remote Attackers to Write Files and Take Over Servers Vulnerabilities AegironFebruary 4, 2026February 4, 202610 mins0 CVE-2024-5986 — H2O-3 Arbitrary File Write Leading to Full Server Compromise High-Level Description In vulnerable versions of…continue reading..
CVE-2026-1432: Critical SQL Injection Flaw in Buroweb “Tablon” Endpoint Exposes Databases to Remote Takeover Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 Overview A critical SQL Injection vulnerability has been identified in the Buroweb application, specifically within the tablon…continue reading..
Critical SQL Injection Flaws Discovered in Django ORM and PostGIS Components Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 Product Details CVE Summary Table CVE Name CVE ID CVSS Score Severity Exploitability Exploit Availability Affected Area…continue reading..
CVE-2026-24936: Critical AD Domain Join Flaw Lets Hackers Take Over ASUSTOR NAS Without Login Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 Vulnerability Overview CVE-2026-24936 is a critical security vulnerability identified in ASUSTOR Data Master (ADM) versions 4.x and…continue reading..
CVE-2026-1814: Rapid7 Nexpose Flaw Exposes Weak Keystore Passwords, Putting Stored Credentials at Risk Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 CVE-2026-1814 Title: Rapid7 Nexpose – Weak Keystore Password GenerationCVE ID: CVE-2026-1814CVSS Base Score: 7.5Severity: HighAttack Vector: LocalPrivileges…continue reading..
CVE-2026-25253: OpenClaw Clients Expose Session Tokens Through Malicious WebSocket Gateways Vulnerabilities AegironFebruary 2, 2026February 2, 20268 mins0 CVE-2026-25253 — OpenClaw / Clawdbot WebSocket Token Exfiltration CVE ID: CVE-2026-25253Severity: HighCVSS v3.1 Score: 8.8Attack Vector: NetworkPrivileges…continue reading..
Medium-Severity SCADA Flaw Exposes Iconics Suite to Disruptive File System Attacks (CVE-2025-0921) CyberSecurity News CyberDefenderFebruary 2, 2026February 2, 20267 mins0 In late January 2026, the cybersecurity research team at Palo Alto Networks Unit 42 disclosed a medium-severity…continue reading..
CVE-2020-37032: Wing FTP Server Admin Console Flaw Allows Authenticated Attackers to Execute System-Level Commands Remotely Vulnerabilities AegironFebruary 1, 2026February 1, 202612 mins0 CVE-2020-37032 — Wing FTP Server — Authenticated Remote Command Execution via Lua Console CVE Name: CVE-2020-37032Product: Wing…continue reading..
CVE-2026-25141: Silent Code Injection in Orval Turns API Specs Into a Supply-Chain Attack Vector Vulnerabilities AegironFebruary 1, 2026February 1, 202612 mins0 CVE-2026-25141 — Orval JavaScript Code Injection (Arbitrary JS Execution) CVE Identifier: CVE-2026-25141Title: Orval JavaScript Code Injection VulnerabilitySeverity:…continue reading..
