CVE-2025-67070: One Request to Rule Them All — MFA Bypass in Intelbras NVD 9032 Enables Full Remote Admin Takeover Vulnerabilities AegironJanuary 10, 2026January 10, 20268 mins0 Affected Product: Intelbras CFTV IP NVD 9032Vendor: IntelbrasVulnerability Class: Authentication Bypass / MFA BypassImpact: Full Administrator Account…continue reading..
CVE-2026-0628: Chrome Zero-Day Actively Exploited in the Wild Vulnerabilities AegironJanuary 9, 2026January 9, 20269 mins0 High-Severity WebView Authorization Flaw Enables Privileged Script Injection via Malicious Extensions Vulnerability Overview CVE ID: CVE-2026-0628Product: Google…continue reading..
CVE-2025-69258: Unauthenticated SYSTEM-Level RCE in Apex Central Enables Full Security Infrastructure Takeover Vulnerabilities AegironJanuary 9, 2026January 9, 20269 mins0 Quick Glance What This Vulnerability Is CVE-2025-69258 is a design-level security flaw in Apex Central’s message-handling service…continue reading..
CVE-2026-22230: Hidden Privilege Escalation in OPEXUS eCASE Audit Enables Silent Authorization Bypass Vulnerabilities AegironJanuary 9, 2026January 9, 20269 mins0 Vulnerability type: Authorization Bypass / Privileged Function AbuseProduct: eCASE Audit module (OPEXUS eCASE Platform)CVE ID: CVE-2026-22230CVSS Score:…continue reading..
CVE-2025-15079 & CVE-2025-14819: libcurl Trust Validation Flaws Undermine Secure Transfers Vulnerabilities AegironJanuary 9, 2026January 9, 20267 mins0 Product: libcurl libcurl is a widely used client-side data transfer library supporting secure protocols such as HTTPS,…continue reading..
CVE-2026-22035: When a Screenshot Becomes a Shell — Greenshot Filename Injection Leads to Local RCE Vulnerabilities AegironJanuary 9, 2026January 9, 20268 mins0 Vulnerability Overview CVE ID: CVE-2026-22035Product: Greenshot (Windows)Affected Component: ExternalCommand pluginVulnerability Type: OS Command Injection (CWE-78)Attack Vector: LocalImpact:…continue reading..
CVE-2025-65518: Unauthenticated Attack Can Knock Plesk Obsidian Control Panel Offline Vulnerabilities AegironJanuary 9, 2026January 9, 20268 mins0 CVE Overview Executive Summary CVE-2025-65518 is an unauthenticated Denial-of-Service vulnerability affecting the Plesk Obsidian control panel. The…continue reading..
CVE-2026-22256 & CVE-2026-22257: Multiple High-Risk XSS Flaws Identified in Salvo Framework Vulnerabilities AegironJanuary 9, 2026January 9, 20269 mins0 Product: Salvo (Rust Web Framework)Vulnerability Type: Cross-Site Scripting (XSS)Affected Component: list_html directory listing handlerImpact: Client-side code execution,…continue reading..
CVE-2026-21883: Bokeh Server WebSocket Origin Validation Bypass Enables Silent Session Hijacking Vulnerabilities AegironJanuary 9, 2026January 9, 202615 mins0 CVE ID: CVE-2026-21883Vulnerability: Origin validation bypass in Bokeh server’s WebSocket handlingSeverity: High / Critical-classCVSS Score: ~9.1 (reflects…continue reading..
CVE-2025-67325: Critical Unauthenticated Remote Code Execution in QloApps via Unrestricted File Upload Vulnerabilities AegironJanuary 9, 2026January 9, 20268 mins0 Vulnerability Overview CVE ID: CVE-2025-67325Product: QloAppsAffected Versions: QloApps 1.7.0 and earlierVulnerability Type: Unrestricted File UploadImpact: Unauthenticated Remote…continue reading..
