Indicators of Compromise

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-377: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

CVEs: CVE-2026-7569

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9787

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-375: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9786

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-374: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9785

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-373: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9784

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-372: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9783

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-371: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9782

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-370: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-9781

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-369: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability

CVEs: CVE-2026-9780

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-7570

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability

CVEs: CVE-2026-8108

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-8108

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-41137

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-364: FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-41264

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-55887

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2026-46873

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 24

ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-27278

Zero Day Initiative →

Information Security Buzz 📡 RSS Jun 19

ShinyHunters targets Oracle PeopleSoft customers through critical zero-day

CVEs: CVE-2026-35273

Information Security Buzz →

Zero Day Initiative 📡 RSS Jun 11

ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-52849

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jun 11

ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

CVEs: CVE-2026-8916

Zero Day Initiative →