CVE-2025-59719: FortiWeb SAML Authentication Flaw Enables Full Login Bypass Threat Advisories AegironDecember 16, 2025December 16, 20257 mins0 Vulnerability Summary Overview Fortinet has addressed a critical authentication bypass vulnerability in its FortiWeb Web Application Firewall…continue reading..
CVE-2025-67494: ZITADEL Login UI Flaw Enables Unauthenticated Full-Read SSRF Threat Advisories AegironDecember 16, 2025December 16, 20258 mins0 Vulnerability Summary Overview ZITADEL has fixed a critical security issue that allowed unauthenticated attackers to abuse the…continue reading..
CVE-2025-66516: Apache Tika PDF Parsing Vulnerability Enables XXE Attacks Threat Advisories AegironDecember 16, 2025December 16, 202510 mins0 Vulnerability Summary Overview Apache Tika has addressed a high-severity security issue involving the processing of XFA (XML…continue reading..
CVE-2025-62472: Windows RasMan Privilege Escalation Vulnerability Threat Advisories AegironDecember 16, 2025December 16, 20258 mins0 Vulnerability Summary Overview Microsoft has addressed a serious local privilege escalation vulnerability in the Windows Remote Access…continue reading..
CVE-2025-62562: Microsoft Patches Outlook RCE Risk Threat Advisories AegironDecember 16, 2025December 16, 20257 mins0 Microsoft addressed CVE-2025-62562 as part of its December 2025 Patch Tuesday release. The vulnerability affects Microsoft Outlook…continue reading..
CVE-2025-6218: WinRAR Path Traversal Used to Silently Install Malware Latest Cyber Attack AegironDecember 15, 2025December 16, 20258 mins0 CVE ID: CVE-2025-6218CVSS Score: 7.8 (High)Status: Actively exploited by multiple threat groupsAdded to CISA KEV: December 10,…continue reading..
CVE-2025-67779: React Server Components DoS Persists After Initial Fix Latest Cyber Attack AegironDecember 15, 2025December 15, 20258 mins0 Vulnerability Name: React / Next.js React Server Components Denial of ServiceCVE ID: CVE-2025-67779Vulnerability Type: Denial of Service…continue reading..
CVE-2025-34179: Unauthenticated SQL Injection in NetSupport Manager Gateway Vulnerabilities AegironDecember 15, 2025December 15, 20258 mins0 CVE ID: CVE-2025-34179Product: NetSupport ManagerAffected Versions: Versions below 14.12.0001Vulnerability Type: Unauthenticated SQL InjectionSeverity: HighCVSS Score: 8.7Exploitability: Yes…continue reading..
CVE-2025-67900 – Local Privilege Escalation Issue Vulnerabilities AegironDecember 15, 2025December 15, 20254 mins0 CVE ID: CVE-2025-67900Vulnerability Type: Local Privilege Escalation (LPE)Severity: HighCVSS Score: 6.2 Overview This vulnerability was published recently…continue reading..
SAP on High Alert: December 2025 Patch Day Fixes Three Critical, High-Impact Flaws Vulnerabilities AegironDecember 15, 2025December 15, 20259 mins0 Release Date: December 10, 2025Patch Cycle: SAP Security Patch Day – December 2025Severity Level: CriticalAffected Areas: SAP…continue reading..
