CVE-2025-15444: Silent Cryptographic Validation Flaw Allows Malicious Ed25519 Points to Bypass Trust Checks Vulnerabilities AegironJanuary 6, 2026January 6, 20268 mins0 Related upstream issue: CVE-2025-69277 (libsodium)Affected component: Crypt::Sodium::XS (Perl module)Affected versions: All versions prior to 0.000042Fixed version: 0.000042Underlying…continue reading..
CVE-2026-21440: Arbitrary File Write via Multipart Path Traversal in adonisjs/bodyparser CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20263 mins0 Field Details CVE ID CVE-2026-21440 Vulnerability Type Path Traversal (CWE-22) Affected Component @adonisjs/bodyparser Attack Vector Remote (via…continue reading..
CVE-2025-68668 n8n CVSS 9.9 Flaw Enables Authenticated Remote Command Execution CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20266 mins0 CVE-2025-68668, a critical security vulnerability has been disclosed in n8n, a popular open-source workflow automation platform. The…continue reading..
CVE-2026-0579: Critical GNU Wget2 Flaw Allows Remote Attackers to Overwrite Sensitive System Files Vulnerabilities AegironJanuary 5, 2026January 5, 20268 mins0 CVE OVERVIEW VULNERABILITY DESCRIPTION CVE-2026-0579 is a critical arbitrary file overwrite vulnerability in GNU Wget2 that occurs…continue reading..
CVE-2025-15446: Unauthenticated Remote SQL Injection in Seeyon Zhiyuan OA System Vulnerabilities AegironJanuary 5, 2026January 5, 20267 mins0 CVE ID: CVE-2025-15446Vulnerability Type: SQL InjectionAffected Product: Seeyon Zhiyuan OA Web Application SystemAffected Versions: All versions up…continue reading..
Inside the Korean Air Employee Data Breach: How a Trusted System Became the Attackers’ Doorway Vulnerabilities AegironJanuary 5, 2026January 5, 20267 mins0 Overview In early January, Korean Air confirmed that personal data of roughly 30,000 current and former employees…continue reading..
CVE-2025-14830: High-Risk XSS Flaw in Artifactory Workers Threatens CI/CD Pipeline Integrity Vulnerabilities AegironJanuary 5, 2026January 5, 20268 mins0 Product: JFrog Artifactory – Workers featureVulnerability Type: Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting…continue reading..
Critical Security Alert: QNAP License Center Flaws Enable Data Leakage and Service Disruption Vulnerabilities AegironJanuary 5, 2026January 5, 20266 mins0 Product Information Vulnerability Summary CVE ID Vulnerability Type Severity CVSS (Estimated) Privileges Required Impact CVE-2025-52871 Out-of-Bounds Read…continue reading..
CVE-2025-64125: Network Boundary Bridging Vulnerability in nCloud VPN Service Threat Advisories AegironJanuary 4, 2026January 4, 20269 mins0 Vendor: Nuvation EnergyProduct: nCloud VPN ServiceCVE ID: CVE-2025-64125 Vulnerability Snapshot (At a Glance) Attribute Details CVSS v3.1…continue reading..
CVE-2025-64121 and CVE-2025-64120: Critical Authentication Bypass and Command Injection Flaws Enable Full Remote Takeover of Nuvation Energy MSC Vulnerabilities AegironJanuary 4, 2026January 4, 20268 mins0 Affected Product: Nuvation Energy Multi-Stack Controller (MSC)Affected Versions: 2.3.8 up to but not including 2.5.1Environment Impacted: Operational…continue reading..
