Indicators of Compromise

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18309

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18308

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18307

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18306

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18305

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18304

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18303

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18302

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18301

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18300

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

CVEs: CVE-2026-18269

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

CVEs: CVE-2026-18268

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

CVEs: CVE-2026-18267

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-18264

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

CVEs: CVE-2026-59689

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability

CVEs: CVE-2026-59690

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

CVEs: CVE-2026-18265

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability

CVEs: CVE-2026-18274

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability

CVEs: CVE-2026-15686

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

CVEs: CVE-2026-18284

Zero Day Initiative →