Indicators of Compromise

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-247: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-5053

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-246: (0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-5058

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-244: (Pwn2Own) QNAP QHora-322 miro_webserver_controllers_api_login_singIn Authentication Bypass Vulnerability

CVEs: CVE-2024-13088

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-243: (Pwn2Own) QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability

CVEs: CVE-2025-62842

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-242: (Pwn2Own) QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability

CVEs: CVE-2025-62840

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-241: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr username SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2025-62846

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-240: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr role_type Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability

CVEs: CVE-2025-62845

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-239: (Pwn2Own) QNAP QHora-322 login.newAuthMiddleware.Authenticator Authentication Bypass Vulnerability

CVEs: CVE-2025-62844

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-238: Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability

CVEs: CVE-2023-6270

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-237: (Pwn2Own) QNAP QHora-322 ip6_wanifset Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability

CVEs: CVE-2025-62843

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-236: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-0954

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-235: Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-0957

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-234: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVEs: CVE-2026-0956

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-233: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVEs: CVE-2026-0955

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-232: (Pwn2Own) Red Hat Enterprise Linux vmwgfx Driver Integer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2025-40277

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-231: Apple macOS Exposure of Sensitive Information to Unauthorized Sphere Information Disclosure Vulnerability

CVEs: CVE-2026-20695

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-230: Apple macOS CoreMedia Framework Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-20690

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-229: OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

CVEs: CVE-2026-3691

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-228: OpenClaw Canvas Authentication Bypass Vulnerability

CVEs: CVE-2026-3690

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-227: OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

CVEs: CVE-2026-3689

Zero Day Initiative →