Indicators of Compromise

Zero Day Initiative 📡 RSS May 12

ZDI-26-313: Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-28847

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 12

ZDI-26-312: Apple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-28955

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 12

ZDI-26-311: Apple macOS CoreSymbolication Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-28918

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 12

ZDI-26-310: Microsoft Windows splwow64 Race Condition Local Privilege Escalation Vulnerability

CVEs: CVE-2026-34342

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 12

ZDI-26-309: Microsoft Windows Message Queueing Double Free Local Privilege Escalation Vulnerability

CVEs: CVE-2026-33838

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 12

ZDI-26-308: Ivanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability

CVEs: CVE-2026-8109

Zero Day Initiative →

Cisco Advisories 📡 RSS May 6

Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities

Domains: sec.cloudapps.cisco.com

Cisco Advisories →

Zero Day Initiative 📡 RSS May 1

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-41265

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 28

ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability

CVEs: CVE-2026-35230

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 27

ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-5943

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 27

ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

CVEs: CVE-2026-5942

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 27

ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-5941

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 27

ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-5940

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 27

ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability

CVEs: CVE-2026-41276

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

CVEs: CVE-2026-6406

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability

CVEs: CVE-2026-24032

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability

CVEs: CVE-2026-25654

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 23

ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-5726

Zero Day Initiative →

Cisco Advisories 📡 RSS Apr 15

Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities

Domains: sec.cloudapps.cisco.com

Cisco Advisories →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-292: QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability

CVEs: CVE-2026-22898

Zero Day Initiative →