Indicators of Compromise

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability

CVEs: CVE-2026-50263

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-50262

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-50261

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-50260

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-50259

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-50258

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-50257

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-50256

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability

CVEs: CVE-2026-35273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-35273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

CVEs: CVE-2026-35273

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9773

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9772

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-10043

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

CVEs: CVE-2026-9779

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-382: ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability

CVEs: CVE-2026-9778

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-381: ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability

CVEs: CVE-2026-9777

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-380: ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability

CVEs: CVE-2026-9776

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-379: ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-9775

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-378: ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-9774

Zero Day Initiative →