Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Home Assistant Green.…

VULNhighZero Day Initiative2 months ago

ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Home Assistant Green.…

VULNhighZero Day Initiative2 months ago

ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Amazon Smart Plug. Aut…

VULNhighZero Day Initiative2 months ago

ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to bypass certificate validation for OTA updates on affected installations of…

VULNhighZero Day Initiative2 months ago

ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Amazon Smart P…

VULNcriticalCheck Point Research3 months ago

Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack

Key Points Introduction Since early 2026, Check Point Research has tracked a wave of the Operation Dream Job campaign. This wave p…

VULNPalo Alto Unit 423 months ago

Kimwolf v7: An Evolution of the Kimwolf Botnet

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup rou…

VULNhighCVE-2026-182917.8 HIGHZero Day Initiative3 months ago

ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-182907.8 HIGHZero Day Initiative3 months ago

ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-182897.8 HIGHZero Day Initiative3 months ago

ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-629118.0 HIGHZero Day Initiative3 months ago

ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Exchange. Although authen…

VULNhighCVE-2026-203165.3 MEDIUMZero Day Initiative3 months ago

ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management…

VULNhighCVE-2026-21045Zero Day Initiative3 months ago

ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S25 devices. User…

VULNhighCVE-2026-282208.4 HIGHZero Day Initiative3 months ago

ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wazuh. An attacker mus…

VULNhighCVE-2026-449018.4 HIGHZero Day Initiative3 months ago

ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wazuh. An attacker mus…

VULNhighCVE-2026-628939.8 CRITICALZero Day Initiative3 months ago

ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Windows Serv…

VULNhighCVE-2026-549847.8 HIGHZero Day Initiative3 months ago

ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Interaction w…

VULNhighCVE-2026-627127.8 HIGHZero Day Initiative3 months ago