When Opening Code Becomes Running Code: Inside CVE-2025-68120 and the Hidden Risk in Developer Tools Threat Advisories AegironDecember 30, 2025December 30, 202511 mins0 A Deep Dive into the Visual Studio Code Go Extension Vulnerability Developer tools are often treated as…continue reading..
CVE-2025-69217: coturn TURN/STUN Server Predictable Random Number Generation Vulnerability Threat Advisories AegironDecember 30, 2025December 30, 202512 mins0 Vulnerability Overview CVE Identifier: CVE-2025-69217Affected Software: coturn (TURN / STUN Server Implementation)Vulnerable Versions: 4.6.2-r5 through 4.7.0-r4Fixed Version:…continue reading..
CVE-2025-15068 – Missing Authorization in Gmission Web Fax Threat Advisories CyberDefenderDecember 29, 2025December 29, 20258 mins0 Title: Missing Authorization in Gmission Web Fax (privilege abuse / session credential falsification)Published: 29 Dec 2025Severity: High…continue reading..
Apple Patches Two Zero-Day Vulnerabilities Actively Exploited in Targeted Attacks Threat Advisories CyberDefenderDecember 29, 2025December 29, 20254 mins0 Apple has released urgent security updates to address two zero-day vulnerabilities that were actively exploited in targeted…continue reading..
Security Advisory: Multiple High-Severity Vulnerabilities in Tenda WH450 Router Threat Advisories CyberDefenderDecember 29, 2025December 29, 20256 mins0 Multiple critical and high-severity vulnerabilities have been published affecting the Tenda WH450 router firmware (version 1.0.0.18) —…continue reading..
CVE-2025-15162: Deep Dive into a High-Risk Tenda WH450 Router Vulnerability Threat Advisories CyberDefenderDecember 29, 2025December 29, 20256 mins0 CVE-2025-15162 is a high-severity stack-based buffer overflow vulnerability affecting the Tenda WH450 router running firmware v1.0.0.18. The…continue reading..
CVE-2025-15136 in TRENDnet TEW-800MB Threat Advisories CyberDefenderDecember 29, 2025December 29, 202512 mins0 CVE-2025-15136 is a remote command-injection vulnerability in the management web interface of the TRENDnet TEW-800MB (firmware v1.0.1.0).…continue reading..
CVE-2025-15137 — Critical Command Injection Vulnerability in TRENDnet TEW-800MB Threat Advisories CyberDefenderDecember 29, 2025December 29, 20255 mins0 CVE Identifier: CVE-2025-15137Published: December 28, 2025Severity: High (CVSS ~8.8 / 9.0, depending on source)Exploit Status: Proof-of-Concept (PoC)…continue reading..
CVE-2025-15067: Critical Unauthenticated File Upload Flaw Enabling Web Shell Deployment and Full Server Takeover Threat Advisories AegironDecember 29, 2025December 29, 202510 mins0 Vulnerability Quick Reference Field Details CVE ID CVE-2025-15067 Vulnerability Name Unrestricted Upload of File with Dangerous Type…continue reading..
CVE-2025-52691: SmarterMail Arbitrary File Upload Leading to Remote Code Execution Threat Advisories AegironDecember 29, 2025December 29, 202512 mins0 Executive Vulnerability Summary (At-a-Glance) Vulnerability Classification Product Background SmarterMail is a widely deployed enterprise email platform positioned…continue reading..
