advisories — FreeIntelHub

Zero Day Initiative advisories Jun 9

ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jun 9

ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.

2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jun 9

ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative → Details

Zero Day Initiative advisories Jun 9

ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of QEMU. An attacker must first obtain the ability to execute low-...

T1548 T1068 1 IOC

Zero Day Initiative → Details

Exploit Database advisories Jun 8

[webapps] OpenEMR 7.0.2 - Arbitrary File Read

OpenEMR 7.0.

Exploit Database → Details

Exploit Database advisories WordPress Jun 5

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

WordPress Contest Gallery 28.1.

Exploit Database → Details

Zero Day Initiative advisories Microsoft Jun 4

ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit thi...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Jun 4

ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute arbitrary cross-origin script on affected installations of Microsoft Edge. User interaction is required...

1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Jun 4

ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability

This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge. User interaction is required to ex...

1 IOC

Zero Day Initiative → Details

Cisco Advisories advisories Cisco Jun 3

Cisco Webex Meetings Cross-Site Scripting Vulnerability

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site script...

T1566.002 T1598

Cisco Advisories → Details

Zero Day Initiative advisories Linux Docker Jun 3

ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain ...

1 IOC

Zero Day Initiative → Details

Exploit Database advisories Drupal Jun 1