Critical jsPDF Exploit: Server Files Leaked via PDF Generation Vulnerabilities AegironJanuary 8, 2026January 8, 202610 mins0 Executive Summary CVE-2025-68428 is a critical arbitrary file read vulnerability affecting the Node.js implementation of jsPDF. When…continue reading..
CVE-2026-20029: High-Risk Cisco ISE Licensing Flaw Enables Authenticated Admins to Read Arbitrary OS Files Vulnerabilities AegironJanuary 8, 2026January 8, 20269 mins0 Vulnerability Overview Field Details CVE ID CVE-2026-20029 Vendor Cisco Product Cisco Identity Services Engine (ISE) Affected Component…continue reading..
Critical Exposure in INIM SmartLiving: Built-In Credentials and Network Pivoting Flaws Put Physical Security at Risk Vulnerabilities AegironJanuary 8, 2026January 8, 20268 mins0 Product Details Product: INIM SmartLivingVendor: INIM ElectronicsCategory: Integrated intrusion detection, alarm management, and building automation platformTypical Use…continue reading..
CVE-2026-21881: One Header Away From Full Kanboard Admin Takeover Vulnerabilities AegironJanuary 8, 2026January 8, 20268 mins0 Vulnerability Overview CVE ID: CVE-2026-21881Product: KanboardAffected Versions: All versions up to and including 1.2.48Fixed Version: 1.2.49Vulnerability Type:…continue reading..
CVE-2026-21875: Critical Unauthenticated Blind SQL Injection Exposes ClipBucket Databases Vulnerabilities AegironJanuary 8, 2026January 8, 20268 mins0 Product: ClipBucket (v5)Vulnerability Type: Blind SQL InjectionSeverity: CriticalCVSS Score: 9.8Attack Vector: Remote (Network)Authentication Required: No (in default…continue reading..
CVE-2025-15346: When “Mutual” TLS Isn’t Mutual — Client Authentication Completely Bypassed Vulnerabilities AegironJanuary 8, 2026January 8, 20269 mins0 CVE ID: CVE-2025-15346Product: wolfSSL Python bindings (wolfssl-py)Vulnerability Type: Authentication Bypass (Mutual TLS)Severity: CriticalCVSS Score: 9.3Attack Vector: NetworkAttack…continue reading..
CVE-2009-0556: CISA Flags Legacy PowerPoint Vulnerability Due to Ongoing Exploitation Risk Vulnerabilities AegironJanuary 8, 2026January 8, 20269 mins0 Technical Description CVE-2009-0556 affects the way Microsoft PowerPoint handles certain internal references while opening a presentation. The…continue reading..
CVE-2025-37164: Unauthenticated Remote Code Execution in HPE OneView Puts Core Infrastructure at Risk Vulnerabilities AegironJanuary 8, 2026January 8, 20269 mins0 What Is the Issue? Hewlett Packard Enterprise OneView is a centralized infrastructure management platform used to manage…continue reading..
CVE-2026-20029: Cisco ISE XML Vulnerability Leading to Sensitive File Disclosure CyberSecurity News CyberDefenderJanuary 8, 2026January 8, 20264 mins0 CVE-2026-20029 is a security flaw in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector…continue reading..
GitLab Addresses High-Risk Vulnerabilities Impacting Self-Managed Instances CyberSecurity News CyberDefenderJanuary 8, 2026January 8, 20263 mins0 GitLab has released emergency security patches to fix multiple vulnerabilities in its DevOps platform that could be…continue reading..
