Indicators of Compromise

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-18287

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-18286

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-18285

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

CVEs: CVE-2026-18273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

CVEs: CVE-2026-18272

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability

CVEs: CVE-2026-18271

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

CVEs: CVE-2026-18270

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability

CVEs: CVE-2026-13054

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-13050

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-13053

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

CVEs: CVE-2025-71387

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability

CVEs: CVE-2025-71386

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-62660

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability

CVEs: CVE-2026-47876

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-43729

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-43733

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability

CVEs: CVE-2026-43780

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-43673

Zero Day Initiative →

The Hacker News 📡 RSS Jul 29

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

The Hacker News →

GBHackers 📡 RSS Jul 29

NGINX Heap Overflow Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

CVEs: CVE-2026-42533

GBHackers →