ZERO-DAY

DATE

NAME

INFO

CATEGORY

SUBCATE

26.6.25 ZDI-25-447 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-446 PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-445 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-444 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-443 PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-442 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-441 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-440 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-439 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-438 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-437 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-436 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-435 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-434 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-433 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-432 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-431 PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-430 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-429 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-428 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-427 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-426 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-425 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-424 Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-423 Microsoft WinJS winjsdevelop Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-422 Microsoft Azure Machine Learning Environments Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-421 Microsoft Azure App Services Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-420 PaperCut NG web-print-hot-folder Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

26.6.25 ZDI-25-419 TeamViewer Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

25.6.25 ZDI-25-418 Apple macOS CoreGraphics PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

24.6.25 ZDI-25-417 Clam AntiVirus UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

24.6.25 ZDI-25-416 ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

24.6.25 ZDI-25-415 ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability

ZERO-DAY

ZERO-DAY

24.6.25 ZDI-25-414 Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-413 Fuji Electric Smart Editor TL5 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-412 Fuji Electric Smart Editor X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-411 Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-410 Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-409 RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-408 PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-407 SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-406 SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-405 Fuji Electric Smart Editor X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-404 Fuji Electric Smart Editor X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-403 Fuji Electric Smart Editor V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-402 Fuji Electric Smart Editor TL5 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-401 Fuji Electric Smart Editor V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-400 Fuji Electric Smart Editor TL5 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-399 Fuji Electric Smart Editor V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-398 Trend Micro Internet Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-397 Delta Electronics COMMGR Insufficient Randomization Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-396 Siemens TeleControl Server Basic UpdateOpcSettings SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-395 Siemens TeleControl Server Basic UpdateGateways SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-394 Siemens TeleControl Server Basic CreateProject SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-393 Siemens TeleControl Server Basic UpdateBufferingSettings SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-392 Siemens TeleControl Server Basic UpdateSmtpSettings SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-391 Siemens TeleControl Server Basic UpdateTcmSettings SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-390 Siemens TeleControl Server Basic UpdateDatabaseSettings SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-389 Siemens TeleControl Server Basic UpdateUsers SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-388 Siemens TeleControl Server Basic ImportDatabase SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-387 Siemens TeleControl Server Basic UpdateProjectConnections SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-386 Siemens TeleControl Server Basic UpdateConnectionVariables SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-385 Siemens TeleControl Server Basic RestoreFromBackup SQL Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-384 Siemens TeleControl Server Basic Authenticate SQL Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-383 Siemens TeleControl Server Basic VerifyUser SQL Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-382 Siemens TeleControl Server Basic UpdateProject SQL Injection Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.6.25 ZDI-25-381 Siemens TeleControl Server Basic CreateTrace SQL Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-380 Trend Micro Maximum Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-379 (Pwn2Own) Ubiquiti Networks AI Bullet Insufficient Firmware Update Validation Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-378 (Pwn2Own) Ubiquiti Networks UniFi Console Missing Authentication for Critical Function Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-377 (Pwn2Own) Ubiquiti Networks AI Bullet Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-376 (Pwn2Own) Ubiquiti Networks AI Bullet Improper Certificate Validation Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-375 Trend Micro Endpoint Encryption ProcessWhereClause SQL Injection Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-374 Trend Micro Endpoint Encryption ValidateToken Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-373 Trend Micro Endpoint Encryption DbAppDomain Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-372 Trend Micro Endpoint Encryption GetGroupFilteredUsers SQL Injection Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-371 Trend Micro Endpoint Encryption DeserializeFromBase64String Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-370 Trend Micro Endpoint Encryption PolicyServerWindowsService Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-369 Trend Micro Endpoint Encryption PolicyValueTableSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-368 Trend Micro Endpoint Encryption BuildEnterpriseSearchString SQL Injection Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-367 Trend Micro Apex Central ConvertFromJson Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-366 Trend Micro Apex Central GetReportDetailView Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-365 Trend Micro Apex One Security Agent ntrmv Uncontrolled Search Path Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-364 Trend Micro Apex One Damage Cleanup Engine Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-363 Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-362 Trend Micro Apex One Data Loss Prevention Uncontrolled Search Path Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-361 Trend Micro Password Manager Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-360 Trend Micro Worry-Free Business Security Uncontrolled Search Path Element Arbitrary Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-359 Microsoft Visual Studio initializeCommand Insufficient UI Warning Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-358 (Pwn2Own) Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-357 (Pwn2Own) Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-356 (Pwn2Own) Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-355 (Pwn2Own) Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-354 (Pwn2Own) Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-353 (Pwn2Own) Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-352 Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-351 Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-350 Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-349 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-348 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-347 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-346 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-345 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-344 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-343 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-342 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-341 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-340 (Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-339 JupyterLab Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-338 Adobe Acrobat Reader DC Collab Object Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-337 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-336 Adobe Acrobat Reader DC Collab Object Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-335 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-334 Microsoft Windows Remote Desktop Gateway Service Null Pointer Dereference Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-333 Microsoft Windows Installer Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.6.25 ZDI-25-332 Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-331 Autodesk Revit RFA File Parsing Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-330 (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-329 (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-328 (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-327 (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-326 (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

8.6.25 ZDI-25-325 Hewlett Packard Enterprise Insight Remote Support processAttachmentDataStream Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-324 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-323 Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-322 2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-321 GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-320 SolarWinds DameWare Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-319 Hewlett Packard Enterprise StoreOnce VSA getServerCertificate Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-318 Hewlett Packard Enterprise StoreOnce VSA getServerPayload Directory Traversal Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-317 Hewlett Packard Enterprise StoreOnce VSA deletePackages Directory Traversal Arbitrary File Deletion Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-316 Hewlett Packard Enterprise StoreOnce VSA Authentication Bypass Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-315 Hewlett Packard Enterprise StoreOnce VSA doExecute Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-314 Hewlett Packard Enterprise StoreOnce VSA doExecute Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-313 Hewlett Packard Enterprise StoreOnce VSA determineInclusionAndExtract Server-Side Request Forgery Vulnerability

ZERO-DAY

ZERO-DAY

5.6.25 ZDI-25-312 Hewlett Packard Enterprise StoreOnce VSA setLocateBeaconOnHardware Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

30.5.24 ZDI-25-311 (Pwn2Own) Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

30.5.24 ZDI-25-310 Linux Kernel ksmbd Session Setup Null Pointer Dereference Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

30.5.24 ZDI-25-309 (Pwn2Own) Canon imageCLASS MF656Cdw sfpcmAuthenticateSecAdmin Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-308 Adobe Dreamweaver V8 Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-307 Linux Kernel OpenvSwitch Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-306 Docker Desktop Helper Service Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-305 Apple XNU kernel vm_map Race Condition Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-304 Apple macOS JPEG Image Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-303 Apple Safari SandboxBroker ZIP File Processing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-302 Apple macOS CoreMedia Framework Memory Corruption Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-301 Apple Safari Scrollbar Animation Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-300 Apple macOS PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-299 Apple macOS acv2 Codec Converter Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-298 Apple macOS MP4 File Parsing Memory Corruption Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-297 Trend Micro Apex Central widget getBlock Local File Inclusion Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-296 Trend Micro Apex Central modTMCM Unrestricted File Upload Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-295 Trend Micro Apex Central widget getObjWGFServiceApiByApiName Local File Inclusion Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-294 Microsoft PC Manager MSPCManagerService Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-293 Microsoft Windows Installer Service Link Following Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-292 (Pwn2Own) Mozilla Firefox SpiderMonkey Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

23.5.24 ZDI-25-291 (Pwn2Own) Mozilla Firefox IonMonkey JIT Compiler Integer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-290 Rockwell Automation ThinManager ThinServer Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-289 Rockwell Automation ThinManager ThinServer Null Pointer Dereference Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-288 Fortinet FortiWeb cgi_httpcontentrouting_post Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-287 JetBrains TeamCity Diagnostics Data Directory Cross-Site Scripting Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-286 Dassault Systèmes eDrawings Viewer OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-285 Dassault Systèmes eDrawings Viewer SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

15.5.24 ZDI-25-284 MATE Desktop Atril Document Viewer EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

8.5.24 ZDI-25-283 MATE Desktop Atril Document Viewer CBT File Parsing Argument Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-282 Webmin CRLF Injection Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-281 Cisco IOS XE SNMP SET cewProxyClass Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-280 Cisco IOS XE SNMP GET-NEXT ciscoFlashChipCode Unexpected Sign Extension Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-279 Cisco IOS XE SNMP GET-NEXT cContextMappingBridgeDomainIdentifier Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-278 Cisco IOS XE SNMP GET-NEXT ctspIpSgtValue Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-277 Cisco IOS XE SNMP SET cewEventTime Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-276 Cisco IOS XE SNMP GET-NEXT cilmCurrentImageLevel Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-275 Cisco IOS XE SNMP GET-NEXT callHomeUserDefCmdName Unexpected Sign Extension Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-274 Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-273 Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-272 Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-271 Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-270 Cisco IOS XE SNMP GET-NEXT ciscoFlashFileSize Unexpected Sign Extension Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 ZDI-25-269 (Pwn2Own) Synology BeeStation BST150-4T Unnecessary Privileges Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.5.24 MintsLoader Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting MALWARE Loader
1.5.24 ZDI-25-268 GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-267 GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-266 Apache ActiveMQ NMS Body Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-265 (Pwn2Own) Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-264 (Pwn2Own) Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-263 (Pwn2Own) Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-262 (Pwn2Own) Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-261 (Pwn2Own) Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-260 (Pwn2Own) Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-259 (Pwn2Own) Adobe Acrobat Reader DC Collab Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-258 (Pwn2Own) Adobe Acrobat Reader DC distributionURL JavaScript API Restrictions Bypass Vulnerability

ZERO-DAY

ZERO-DAY

1.5.24 ZDI-25-257 (Pwn2Own) Oracle VirtualBox OHCI USB Controller Race Condition Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

25.4.25 ZDI-25-256 Avast Free Antivirus Integer Overflow Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

25.4.25 ZDI-25-255 Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

25.4.25 ZDI-25-254 Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

25.4.25 ZDI-25-253 SonicWALL Connect Tunnel Link Following Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

24.4.25 ZDI-25-252 (0Day) Cato Networks Cato Client for macOS Helper Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

24.4.25 ZDI-25-251 (0Day) Harman Becker MGU21 Bluetooth Improper Input Validation Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

24.4.25 ZDI-25-250 (0Day) Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

24.4.25 ZDI-25-249 (0Day) eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

24.4.25 ZDI-25-248 (0Day) eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

24.4.25 ZDI-25-247 (0Day) eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-246 MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-245 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-244 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-243 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-242 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-241 Trend Micro Deep Security Agent Link Following Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-240 Trend Micro Deep Security Anti-Malware Solution Platform Link Following Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-239 Trend Micro Deep Security Link Following Local Privilege Escalation Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-238 Trend Micro Apex Central Query Server-Side Request Forgery Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-237 Trend Micro Apex Central modOSCE Server-Side Request Forgery Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-236 Trend Micro Apex Central modTMSM Server-Side Request Forgery Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-235 Ivanti Endpoint Manager OpenRecordSet SQL Injection Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-234 Microsoft Windows dxkrnl Untrusted Pointer Dereference Local Privilege Escalation Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-233 Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-232 Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-231 Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-230 (Pwn2Own) Samsung Galaxy S24 Smart Switch Agent Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY
11.4.25 ZDI-25-229 (Pwn2Own) Samsung Galaxy S24 Quick Share Directory Traversal Arbitrary File Write Vulnerability ZERO-DAY ZERO-DAY
11.4.25 ZDI-25-228 (Pwn2Own) Samsung Galaxy S24 Quick Share Insufficient UI Warning Arbitrary File Write Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-227 (Pwn2Own) Samsung Galaxy S24 Gaming Hub Exposed Dangerous Method Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-226 (Pwn2Own) Samsung Galaxy S24 Gaming Hub Improper Input Validation Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-225 (Pwn2Own) Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-224 (Pwn2Own) Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-223 (Pwn2Own) Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-222 (Pwn2Own) Lexmark CX331adwe concatstrings Type Confusion Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-221 (Pwn2Own) Lexmark CX331adwe httpd extract-trace Link Following Local Privilege Escalation Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-220 (Pwn2Own) Lexmark CX331adwe basic_auth.cgi PATH_TRANSLATED Directory Traversal Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-219 (Pwn2Own) Lexmark CX331adwe JBIG2 File Parsing new_image Integer Overflow Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-218 (Pwn2Own) Lexmark CX331adwe JPEG2000 Memory Corruption Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-217 (Pwn2Own) Lexmark CX331adwe loadCFFdata Type Confusion Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-216 (Pwn2Own) Synology TC500 ONVIF Heap-based Buffer Overflow Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-215 (Pwn2Own) Synology DiskStation DS1823xs+ LDAP Client Improper Certificate Validation Authentication Bypass Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-214 (Pwn2Own) Synology DiskStation DS1823xs+ Vue.JS Improper Neutralization of Argument Delimiters Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-213 (Pwn2Own) Synology BeeStation BST150-4T Improper Authentication Vulnerability ZERO-DAY ZERO-DAY
11.4.25 ZDI-25-212 (Pwn2Own) Synology BeeStation BST150-4T Improper Authentication Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-211 (Pwn2Own) Synology BeeStation BST150-4T Improper Input Validation Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-210 (Pwn2Own) Synology BeeStation BST150-4T Improper Input Validation Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-209 (Pwn2Own) Synology BeeStation BST150-4T Cleartext Transmission of Sensitive Information Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-208 (Pwn2Own) Synology DiskStation DS1823xs+ Replication Service Out-Of-Bounds Write Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

11.4.25 ZDI-25-207 (Pwn2Own) Synology BeeStation BST150-4T Command Injection Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY
8.4.25 ZDI-25-206 Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

8.4.25 ZDI-25-205 Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

8.4.25 ZDI-25-204 GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

8.4.25 ZDI-25-203 GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY
8.4.25 ZDI-25-202 Fortinet FortiWeb cgi_xmlprotection_xmlschemafile_post Directory Traversal Arbitrary File Write Vulnerability

ZERO-DAY

ZERO-DAY

8.4.25 ZDI-25-201 Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability

ZERO-DAY

ZERO-DAY

8.4.25 ZDI-25-200 Exim Use-After-Free Local Privilege Escalation Vulnerability

ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-196 Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-195 Apple macOS CoreGraphics Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-194 Apple macOS AppleIntelKBLGraphics Time-Of-Check Time-Of-Use Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-193 Apple macOS CoreText Font Glyphs Parsing Out-Of-Bounds Read Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-192 Apple macOS MP4 File Parsing Memory Corruption Remote Code Execution Vulnerability ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-191 Apple macOS MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-190

Apple macOS MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-189

Apple macOS AudioToolbox AMR File Parsing Memory Corruption Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY

2.4.25 ZDI-25-188

Apple macOS AudioToolboxCore WAV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZERO-DAY

ZERO-DAY

26.3.25

ZDI-25-187 (0Day) BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-186 (0Day) BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-185 (0Day) BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-184 (0Day) BEC Technologies Multiple Routers Authentication Bypass Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-183 (0Day) Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-182 (0Day) Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-181 (0Day) Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-180 (0Day) 70mai A510 Use of Default Password Authentication Bypass Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-179 (0Day) CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-178 (0Day) CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-177 (0Day) CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability ZERO-DAY ZERO-DAY

26.3.25

ZDI-25-176 (0Day) CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability ZERO-DAY ZERO-DAY

20.3.25

ZDI-25-175 (0Day) Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY

20.3.25

ZDI-25-174 (0Day) Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY

20.3.25

ZDI-25-173 (0Day) Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability ZERO-DAY ZERO-DAY

19.3.25

ZDI-CAN-25373

(0Day) Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

ZERO-DAY

ZERO-DAY