<![CDATA[ZDI: Published Advisories]]> http://www.zerodayinitiative.com/advisories/published/ Tue, 11 Aug 2026 01:15:06 -0500 Trend Micro, all rights reserved en <![CDATA[ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability]]> ZDI-CAN-30585 http://www.zerodayinitiative.com/advisories/ZDI-26-526/ Wed, 05 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability]]> ZDI-CAN-30583 http://www.zerodayinitiative.com/advisories/ZDI-26-525/ Wed, 05 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability]]> ZDI-CAN-30584 http://www.zerodayinitiative.com/advisories/ZDI-26-524/ Wed, 05 Aug 2026 00:00:00 -0500 <![CDATA[ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-27987 http://www.zerodayinitiative.com/advisories/ZDI-26-523/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability]]> ZDI-CAN-27763 http://www.zerodayinitiative.com/advisories/ZDI-26-522/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27762 http://www.zerodayinitiative.com/advisories/ZDI-26-521/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability]]> ZDI-CAN-29093 http://www.zerodayinitiative.com/advisories/ZDI-26-520/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29077 http://www.zerodayinitiative.com/advisories/ZDI-26-519/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability]]> ZDI-CAN-29073 http://www.zerodayinitiative.com/advisories/ZDI-26-518/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29054 http://www.zerodayinitiative.com/advisories/ZDI-26-517/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability]]> ZDI-CAN-29055 http://www.zerodayinitiative.com/advisories/ZDI-26-516/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability]]> ZDI-CAN-28999 http://www.zerodayinitiative.com/advisories/ZDI-26-515/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability]]> ZDI-CAN-29076 http://www.zerodayinitiative.com/advisories/ZDI-26-514/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability]]> ZDI-CAN-29110 http://www.zerodayinitiative.com/advisories/ZDI-26-513/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability]]> ZDI-CAN-29052 http://www.zerodayinitiative.com/advisories/ZDI-26-512/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-29075 http://www.zerodayinitiative.com/advisories/ZDI-26-511/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability]]> ZDI-CAN-29094 http://www.zerodayinitiative.com/advisories/ZDI-26-510/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability]]> ZDI-CAN-29091 http://www.zerodayinitiative.com/advisories/ZDI-26-509/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability]]> ZDI-CAN-29108 http://www.zerodayinitiative.com/advisories/ZDI-26-508/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability]]> ZDI-CAN-29109 http://www.zerodayinitiative.com/advisories/ZDI-26-507/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability]]> ZDI-CAN-29050 http://www.zerodayinitiative.com/advisories/ZDI-26-506/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability]]> ZDI-CAN-29074 http://www.zerodayinitiative.com/advisories/ZDI-26-505/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29059 http://www.zerodayinitiative.com/advisories/ZDI-26-504/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability]]> ZDI-CAN-29058 http://www.zerodayinitiative.com/advisories/ZDI-26-503/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-29085 http://www.zerodayinitiative.com/advisories/ZDI-26-502/ Thu, 30 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability]]> ZDI-CAN-31457 http://www.zerodayinitiative.com/advisories/ZDI-26-501/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-31458 http://www.zerodayinitiative.com/advisories/ZDI-26-500/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-31459 http://www.zerodayinitiative.com/advisories/ZDI-26-499/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability]]> ZDI-CAN-28122 http://www.zerodayinitiative.com/advisories/ZDI-26-498/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability]]> ZDI-CAN-28148 http://www.zerodayinitiative.com/advisories/ZDI-26-497/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability]]> ZDI-CAN-28718 http://www.zerodayinitiative.com/advisories/ZDI-26-496/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability]]> ZDI-CAN-31293 http://www.zerodayinitiative.com/advisories/ZDI-26-495/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30380 http://www.zerodayinitiative.com/advisories/ZDI-26-494/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29483 http://www.zerodayinitiative.com/advisories/ZDI-26-493/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability]]> ZDI-CAN-29252 http://www.zerodayinitiative.com/advisories/ZDI-26-492/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29143 http://www.zerodayinitiative.com/advisories/ZDI-26-491/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability]]> ZDI-CAN-29070 http://www.zerodayinitiative.com/advisories/ZDI-26-490/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability]]> ZDI-CAN-28981 http://www.zerodayinitiative.com/advisories/ZDI-26-489/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability]]> ZDI-CAN-28974 http://www.zerodayinitiative.com/advisories/ZDI-26-488/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability]]> ZDI-CAN-29111 http://www.zerodayinitiative.com/advisories/ZDI-26-487/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability]]> ZDI-CAN-28980 http://www.zerodayinitiative.com/advisories/ZDI-26-486/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29066 http://www.zerodayinitiative.com/advisories/ZDI-26-485/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability]]> ZDI-CAN-28751 http://www.zerodayinitiative.com/advisories/ZDI-26-484/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30634 http://www.zerodayinitiative.com/advisories/ZDI-26-483/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability]]> ZDI-CAN-30687 http://www.zerodayinitiative.com/advisories/ZDI-26-482/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability]]> ZDI-CAN-30735 http://www.zerodayinitiative.com/advisories/ZDI-26-481/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability]]> ZDI-CAN-30036 http://www.zerodayinitiative.com/advisories/ZDI-26-480/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-28603 http://www.zerodayinitiative.com/advisories/ZDI-26-479/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability]]> ZDI-CAN-28201 http://www.zerodayinitiative.com/advisories/ZDI-26-478/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability]]> ZDI-CAN-29061 http://www.zerodayinitiative.com/advisories/ZDI-26-477/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability]]> ZDI-CAN-28992 http://www.zerodayinitiative.com/advisories/ZDI-26-476/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-28995 http://www.zerodayinitiative.com/advisories/ZDI-26-475/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29072 http://www.zerodayinitiative.com/advisories/ZDI-26-474/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29060 http://www.zerodayinitiative.com/advisories/ZDI-26-473/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29042 http://www.zerodayinitiative.com/advisories/ZDI-26-472/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-28990 http://www.zerodayinitiative.com/advisories/ZDI-26-471/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29159 http://www.zerodayinitiative.com/advisories/ZDI-26-470/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29160 http://www.zerodayinitiative.com/advisories/ZDI-26-469/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28749 http://www.zerodayinitiative.com/advisories/ZDI-26-468/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29787 http://www.zerodayinitiative.com/advisories/ZDI-26-467/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29581 http://www.zerodayinitiative.com/advisories/ZDI-26-466/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29584 http://www.zerodayinitiative.com/advisories/ZDI-26-465/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29608 http://www.zerodayinitiative.com/advisories/ZDI-26-464/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-29510 http://www.zerodayinitiative.com/advisories/ZDI-26-463/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29401 http://www.zerodayinitiative.com/advisories/ZDI-26-462/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29405 http://www.zerodayinitiative.com/advisories/ZDI-26-461/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29404 http://www.zerodayinitiative.com/advisories/ZDI-26-460/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29396 http://www.zerodayinitiative.com/advisories/ZDI-26-459/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29406 http://www.zerodayinitiative.com/advisories/ZDI-26-458/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29403 http://www.zerodayinitiative.com/advisories/ZDI-26-457/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29399 http://www.zerodayinitiative.com/advisories/ZDI-26-456/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29398 http://www.zerodayinitiative.com/advisories/ZDI-26-455/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29395 http://www.zerodayinitiative.com/advisories/ZDI-26-454/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29289 http://www.zerodayinitiative.com/advisories/ZDI-26-453/ Wed, 29 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability]]> ZDI-CAN-29196 http://www.zerodayinitiative.com/advisories/ZDI-26-452/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability]]> ZDI-CAN-29308 http://www.zerodayinitiative.com/advisories/ZDI-26-451/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-28831 http://www.zerodayinitiative.com/advisories/ZDI-26-450/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability]]> ZDI-CAN-28876 http://www.zerodayinitiative.com/advisories/ZDI-26-449/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-28703 http://www.zerodayinitiative.com/advisories/ZDI-26-448/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29251 http://www.zerodayinitiative.com/advisories/ZDI-26-447/ Thu, 23 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability]]> ZDI-CAN-32968 http://www.zerodayinitiative.com/advisories/ZDI-26-446/ Tue, 21 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability]]> ZDI-CAN-32967 http://www.zerodayinitiative.com/advisories/ZDI-26-445/ Tue, 21 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30169 http://www.zerodayinitiative.com/advisories/ZDI-26-444/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability]]> ZDI-CAN-31467 http://www.zerodayinitiative.com/advisories/ZDI-26-443/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability]]> ZDI-CAN-31764 http://www.zerodayinitiative.com/advisories/ZDI-26-442/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29496 http://www.zerodayinitiative.com/advisories/ZDI-26-441/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability]]> ZDI-CAN-27744 http://www.zerodayinitiative.com/advisories/ZDI-26-440/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability]]> ZDI-CAN-27670 http://www.zerodayinitiative.com/advisories/ZDI-26-439/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability]]> ZDI-CAN-27055 http://www.zerodayinitiative.com/advisories/ZDI-26-438/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability]]> ZDI-CAN-29113 http://www.zerodayinitiative.com/advisories/ZDI-26-437/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29048 http://www.zerodayinitiative.com/advisories/ZDI-26-436/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29044 http://www.zerodayinitiative.com/advisories/ZDI-26-435/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability]]> ZDI-CAN-29046 http://www.zerodayinitiative.com/advisories/ZDI-26-434/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability]]> ZDI-CAN-29062 http://www.zerodayinitiative.com/advisories/ZDI-26-433/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-28665 http://www.zerodayinitiative.com/advisories/ZDI-26-432/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability]]> ZDI-CAN-28776 http://www.zerodayinitiative.com/advisories/ZDI-26-431/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability]]> ZDI-CAN-28935 http://www.zerodayinitiative.com/advisories/ZDI-26-430/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28090 http://www.zerodayinitiative.com/advisories/ZDI-26-429/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30173 http://www.zerodayinitiative.com/advisories/ZDI-26-428/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability]]> ZDI-CAN-30097 http://www.zerodayinitiative.com/advisories/ZDI-26-427/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-30378 http://www.zerodayinitiative.com/advisories/ZDI-26-426/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability]]> ZDI-CAN-30391 http://www.zerodayinitiative.com/advisories/ZDI-26-425/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability]]> ZDI-CAN-28485 http://www.zerodayinitiative.com/advisories/ZDI-26-424/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability]]> ZDI-CAN-28554 http://www.zerodayinitiative.com/advisories/ZDI-26-423/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability]]> ZDI-CAN-30236 http://www.zerodayinitiative.com/advisories/ZDI-26-422/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability]]> ZDI-CAN-28724 http://www.zerodayinitiative.com/advisories/ZDI-26-421/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability]]> ZDI-CAN-29867 http://www.zerodayinitiative.com/advisories/ZDI-26-420/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability]]> ZDI-CAN-29588 http://www.zerodayinitiative.com/advisories/ZDI-26-419/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability]]> ZDI-CAN-30803 http://www.zerodayinitiative.com/advisories/ZDI-26-418/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability]]> ZDI-CAN-30003 http://www.zerodayinitiative.com/advisories/ZDI-26-417/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability]]> ZDI-CAN-28769 http://www.zerodayinitiative.com/advisories/ZDI-26-416/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability]]> ZDI-CAN-30052 http://www.zerodayinitiative.com/advisories/ZDI-26-415/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-31478 http://www.zerodayinitiative.com/advisories/ZDI-26-414/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability]]> ZDI-CAN-31261 http://www.zerodayinitiative.com/advisories/ZDI-26-413/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-31490 http://www.zerodayinitiative.com/advisories/ZDI-26-412/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28693 http://www.zerodayinitiative.com/advisories/ZDI-26-411/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28677 http://www.zerodayinitiative.com/advisories/ZDI-26-410/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30498 http://www.zerodayinitiative.com/advisories/ZDI-26-409/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30560 http://www.zerodayinitiative.com/advisories/ZDI-26-408/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30559 http://www.zerodayinitiative.com/advisories/ZDI-26-407/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30558 http://www.zerodayinitiative.com/advisories/ZDI-26-406/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability]]> ZDI-CAN-30561 http://www.zerodayinitiative.com/advisories/ZDI-26-405/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-27843 http://www.zerodayinitiative.com/advisories/ZDI-26-404/ Wed, 15 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability]]> ZDI-CAN-27277 http://www.zerodayinitiative.com/advisories/ZDI-26-403/ Wed, 08 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability]]> ZDI-CAN-27004 http://www.zerodayinitiative.com/advisories/ZDI-26-402/ Wed, 08 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability]]> ZDI-CAN-26645 http://www.zerodayinitiative.com/advisories/ZDI-26-401/ Wed, 08 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability]]> ZDI-CAN-26591 http://www.zerodayinitiative.com/advisories/ZDI-26-400/ Mon, 13 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability]]> ZDI-CAN-26851 http://www.zerodayinitiative.com/advisories/ZDI-26-399/ Wed, 08 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability]]> ZDI-CAN-25884 http://www.zerodayinitiative.com/advisories/ZDI-26-398/ Wed, 08 Jul 2026 00:00:00 -0500 <![CDATA[ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability]]> ZDI-CAN-30168 http://www.zerodayinitiative.com/advisories/ZDI-26-397/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-30165 http://www.zerodayinitiative.com/advisories/ZDI-26-396/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability]]> ZDI-CAN-30164 http://www.zerodayinitiative.com/advisories/ZDI-26-395/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability]]> ZDI-CAN-30163 http://www.zerodayinitiative.com/advisories/ZDI-26-394/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30161 http://www.zerodayinitiative.com/advisories/ZDI-26-393/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30160 http://www.zerodayinitiative.com/advisories/ZDI-26-392/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability]]> ZDI-CAN-30159 http://www.zerodayinitiative.com/advisories/ZDI-26-391/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-30136 http://www.zerodayinitiative.com/advisories/ZDI-26-390/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability]]> ZDI-CAN-31818 http://www.zerodayinitiative.com/advisories/ZDI-26-389/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-31817 http://www.zerodayinitiative.com/advisories/ZDI-26-388/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability]]> ZDI-CAN-31816 http://www.zerodayinitiative.com/advisories/ZDI-26-387/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30134 http://www.zerodayinitiative.com/advisories/ZDI-26-386/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-30116 http://www.zerodayinitiative.com/advisories/ZDI-26-385/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-27990 http://www.zerodayinitiative.com/advisories/ZDI-26-384/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability]]> ZDI-CAN-28590 http://www.zerodayinitiative.com/advisories/ZDI-26-383/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-382: ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-28579 http://www.zerodayinitiative.com/advisories/ZDI-26-382/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-381: ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-28578 http://www.zerodayinitiative.com/advisories/ZDI-26-381/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-380: ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability]]> ZDI-CAN-28505 http://www.zerodayinitiative.com/advisories/ZDI-26-380/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-379: ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability]]> ZDI-CAN-28503 http://www.zerodayinitiative.com/advisories/ZDI-26-379/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-378: ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability]]> ZDI-CAN-28502 http://www.zerodayinitiative.com/advisories/ZDI-26-378/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-377: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability]]> ZDI-CAN-28202 http://www.zerodayinitiative.com/advisories/ZDI-26-377/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27625 http://www.zerodayinitiative.com/advisories/ZDI-26-376/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-375: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27626 http://www.zerodayinitiative.com/advisories/ZDI-26-375/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-374: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27630 http://www.zerodayinitiative.com/advisories/ZDI-26-374/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-373: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27631 http://www.zerodayinitiative.com/advisories/ZDI-26-373/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-372: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27632 http://www.zerodayinitiative.com/advisories/ZDI-26-372/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-371: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27633 http://www.zerodayinitiative.com/advisories/ZDI-26-371/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-370: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27648 http://www.zerodayinitiative.com/advisories/ZDI-26-370/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-369: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability]]> ZDI-CAN-27666 http://www.zerodayinitiative.com/advisories/ZDI-26-369/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability]]> ZDI-CAN-27809 http://www.zerodayinitiative.com/advisories/ZDI-26-368/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability]]> ZDI-CAN-27671 http://www.zerodayinitiative.com/advisories/ZDI-26-367/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability]]> ZDI-CAN-27673 http://www.zerodayinitiative.com/advisories/ZDI-26-366/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29410 http://www.zerodayinitiative.com/advisories/ZDI-26-365/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-364: FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29411 http://www.zerodayinitiative.com/advisories/ZDI-26-364/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability]]> ZDI-CAN-29539 http://www.zerodayinitiative.com/advisories/ZDI-26-363/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability]]> ZDI-CAN-29271 http://www.zerodayinitiative.com/advisories/ZDI-26-362/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29178 http://www.zerodayinitiative.com/advisories/ZDI-26-361/ Wed, 24 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30289 http://www.zerodayinitiative.com/advisories/ZDI-26-360/ Thu, 11 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability]]> ZDI-CAN-30288 http://www.zerodayinitiative.com/advisories/ZDI-26-359/ Thu, 11 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability]]> ZDI-CAN-28236 http://www.zerodayinitiative.com/advisories/ZDI-26-358/ Thu, 11 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability]]> ZDI-CAN-28208 http://www.zerodayinitiative.com/advisories/ZDI-26-357/ Thu, 11 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-30089 http://www.zerodayinitiative.com/advisories/ZDI-26-356/ Thu, 11 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-28816 http://www.zerodayinitiative.com/advisories/ZDI-26-355/ Wed, 10 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29987 http://www.zerodayinitiative.com/advisories/ZDI-26-354/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30387 http://www.zerodayinitiative.com/advisories/ZDI-26-353/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30689 http://www.zerodayinitiative.com/advisories/ZDI-26-352/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-30375 http://www.zerodayinitiative.com/advisories/ZDI-26-351/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29653 http://www.zerodayinitiative.com/advisories/ZDI-26-350/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29886 http://www.zerodayinitiative.com/advisories/ZDI-26-349/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29896 http://www.zerodayinitiative.com/advisories/ZDI-26-348/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-29409 http://www.zerodayinitiative.com/advisories/ZDI-26-347/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability]]> ZDI-CAN-29433 http://www.zerodayinitiative.com/advisories/ZDI-26-346/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability]]> ZDI-CAN-30015 http://www.zerodayinitiative.com/advisories/ZDI-26-345/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-29477 http://www.zerodayinitiative.com/advisories/ZDI-26-344/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability]]> ZDI-CAN-29828 http://www.zerodayinitiative.com/advisories/ZDI-26-343/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability]]> ZDI-CAN-30437 http://www.zerodayinitiative.com/advisories/ZDI-26-342/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability]]> ZDI-CAN-30439 http://www.zerodayinitiative.com/advisories/ZDI-26-341/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability]]> ZDI-CAN-30438 http://www.zerodayinitiative.com/advisories/ZDI-26-340/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-339: Microsoft Windows Narrator Braille Support brlapi Exposed Dangerous Function Local Privilege Escalation Vulnerability]]> ZDI-CAN-28792 http://www.zerodayinitiative.com/advisories/ZDI-26-339/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-338: NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability]]> ZDI-CAN-28649 http://www.zerodayinitiative.com/advisories/ZDI-26-338/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability]]> ZDI-CAN-28736 http://www.zerodayinitiative.com/advisories/ZDI-26-337/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-28737 http://www.zerodayinitiative.com/advisories/ZDI-26-336/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability]]> ZDI-CAN-28706 http://www.zerodayinitiative.com/advisories/ZDI-26-335/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability]]> ZDI-CAN-28679 http://www.zerodayinitiative.com/advisories/ZDI-26-334/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability]]> ZDI-CAN-28593 http://www.zerodayinitiative.com/advisories/ZDI-26-333/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability]]> ZDI-CAN-27578 http://www.zerodayinitiative.com/advisories/ZDI-26-332/ Tue, 09 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability]]> ZDI-CAN-31431 http://www.zerodayinitiative.com/advisories/ZDI-26-331/ Thu, 04 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability]]> ZDI-CAN-31430 http://www.zerodayinitiative.com/advisories/ZDI-26-330/ Thu, 04 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability]]> ZDI-CAN-31429 http://www.zerodayinitiative.com/advisories/ZDI-26-329/ Thu, 04 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-328: ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability]]> ZDI-CAN-28489 http://www.zerodayinitiative.com/advisories/ZDI-26-328/ Wed, 10 Jun 2026 00:00:00 -0500 <![CDATA[ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability]]> ZDI-CAN-30796 http://www.zerodayinitiative.com/advisories/ZDI-26-327/ Wed, 03 Jun 2026 00:00:00 -0500