Indicators of Compromise

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-268: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

CVEs: CVE-2026-25203

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-40688

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

CVEs: CVE-2026-39811

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability

CVEs: CVE-2026-27305

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

CVEs: CVE-2026-27282

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-262: Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-34619

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-5495

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-5494

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-5493

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

CVEs: CVE-2026-5496

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 2

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-21518

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 2

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

CVEs: CVE-2026-4698

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 2

ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVEs: CVE-2026-3775

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 31

ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

CVEs: CVE-2026-23092

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVEs: CVE-2026-5055

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability

CVEs: CVE-2026-5054

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-247: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-5053

Zero Day Initiative →

Google Project Zero 📡 RSS Jan 30

Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529

CVEs: CVE-2024-54529 CVE-2025-31235

Google Project Zero →

WeLiveSecurity 📡 RSS Dec 22

Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component

CVEs: CVE-2025-50165

WeLiveSecurity →