Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNcriticalCVE-2026-54947.8 HIGHZero Day Initiative4 months ago

ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNcriticalCVE-2026-54957.8 HIGHZero Day Initiative4 months ago

ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNRecorded Future4 months ago

Day in the Life: Product Manager at Recorded Future

VentureFizz interviews Senior Product Manager Kyle Kohler on his role at Recorded Future

VULNhighMandiant4 months ago

vSphere and BRICKSTORM Malware: A Defender's Guide

Written by: Stuart Carrera Introduction Building on recent BRICKSTORM research from Google Threat Intelligence Group (GTIG), th…

VULNhighCVE-2026-26999.8 CRITICALwatchTowr Labs4 months ago

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)

If you squint and look at the CISA KEV list, you might think it's made up exclusively of vulnerabilities in file transfer solution…

VULNhighCVE-2026-46989.8 CRITICALZero Day Initiative4 months ago

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interactio…

VULNhighCVE-2026-215188.8 HIGHZero Day Initiative4 months ago

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. Us…

VULNhighCVE-2026-37757.8 HIGHZero Day Initiative4 months ago

ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must f…

VULNRecorded Future4 months ago

Panorama do cibercrime na América Latina e Caribe

Este relatório oferece uma visão geral das tendências e desenvolvimentos no ecossistema cibercriminoso da América Latina e do Cari…

VULNRecorded Future4 months ago

Latin America and the Caribbean Cybercrime Landscape

This report provides an overview of trends and developments in the cybercriminal ecosystem of Latin America and the Caribbean (LAC…

VULNRecorded Future4 months ago

Panorama del cibercrimen en América Latina y el Caribe

Este informe ofrece una visión general de las tendencias y desarrollos en el ecosistema cibercriminal de América Latina y el Carib…

VULNRecorded Future4 months ago

Industrialization of the Fraud Ecosystem Blog

Payment fraud has industrialized, and that's a defensive advantage. Learn how standardized attack infrastructure creates detectabl…

VULNRecorded Future4 months ago

The Shift: An Era of Quantum Geopolitics

The expanding conflict around Iran signals a deeper shift. We have entered an era of quantum geopolitics, where the old rules of t…

VULNMandiant4 months ago

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

Written by: Austin Larsen, Dima Lenz, Adrian Hernandez, Tyler McLellan, Christopher Gardner, Ashley Zaya, Michael Rudden, Mon Licl…

VULNhighCVE-2026-230927.8 HIGHZero Day Initiative4 months ago

ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighCVE-2026-09547.8 HIGHZero Day Initiative4 months ago

ZDI-26-236: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-50557.8 HIGHZero Day Initiative4 months ago

ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first o…

VULNhighCVE-2026-50547.8 HIGHZero Day Initiative4 months ago

ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first ob…

VULNhighCVE-2026-50537.1 HIGHZero Day Initiative4 months ago

ZDI-26-247: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first…

VULNhighCVE-2025-628466.7 MEDIUMZero Day Initiative4 months ago

ZDI-26-241: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr username SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Although…

VULNhighCVE-2025-628456.7 MEDIUMZero Day Initiative4 months ago

ZDI-26-240: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr role_type Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected QNAP QHora-322 routers. Although authentication is…

VULNhighCVE-2025-628445.5 MEDIUMZero Day Initiative4 months ago

ZDI-26-239: (Pwn2Own) QNAP QHora-322 login.newAuthMiddleware.Authenticator Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of QNAP QHora-322 routers. Authentic…

VULNhighCVE-2023-62707.0 HIGHZero Day Initiative4 months ago

ZDI-26-238: Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighCVE-2025-628436.8 MEDIUMZero Day Initiative4 months ago

ZDI-26-237: (Pwn2Own) QNAP QHora-322 ip6_wanifset Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass firewall rules on affected installations of QNAP QHora-322 routers.…

VULNhighCVE-2026-09577.8 HIGHZero Day Initiative4 months ago

ZDI-26-235: Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-09567.8 HIGHZero Day Initiative4 months ago

ZDI-26-234: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-09557.8 HIGHZero Day Initiative4 months ago

ZDI-26-233: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-206906.5 MEDIUMZero Day Initiative4 months ago

ZDI-26-230: Apple macOS CoreMedia Framework Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is…

VULNhighCVE-2026-36896.5 MEDIUMZero Day Initiative4 months ago

ZDI-26-227: OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication…

VULNhighCVE-2025-628403.3 LOWZero Day Initiative4 months ago

ZDI-26-242: (Pwn2Own) QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of QNAP TS-453E d…