Indicators of Compromise

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-208: (Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2025-14237

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-207: (Pwn2Own) Canon imageCLASS MF654Cdw dtdc_addr_importSub Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2025-14236

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-206: (Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2025-14235

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-205: (Pwn2Own) Canon imageCLASS MF654Cdw PJCC Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2025-14234

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-204: (Pwn2Own) Canon imageCLASS MF654Cdw XPS Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2025-14232

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-203: (Pwn2Own) Canon imageCLASS MF654Cdw XML SOAP Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2025-14231

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-202: (Pwn2Own) QNAP TS-453E Hyper Data Protector Plugin query_original_file_size SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2025-59389

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-201: (Pwn2Own) QNAP TS-453E Hyper Data Protector Plugin Hard-Coded Credentials Authentication Bypass Vulnerability

CVEs: CVE-2025-59388

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-200: (Pwn2Own) QNAP TS-453E nvrlog_event_add msg SQL Injection Remote Code Execution Vulnerability

CVEs: CVE-2025-62849

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-199: (Pwn2Own) QNAP TS-453E conn_log_tool Format String Remote Code Execution Vulnerability

CVEs: CVE-2025-62848

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-198: (Pwn2Own) QNAP TS-453E malware_remover Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2025-11837

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-197: (Pwn2Own) ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-4157

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-196: (Pwn2Own) ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4156

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-195: (Pwn2Own) ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability

CVEs: CVE-2026-4155

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-194: Microsoft Exchange InterceptorSmtpAgent Improper Input Validation Security Feature Bypass Vulnerability

CVEs: CVE-2026-21527

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-193: (Pwn2Own) Linux Kernel nf_tables_newset Out-Of-Bounds Write Information Disclosure Vulnerability

CVEs: CVE-2022-1972

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-192: Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability

CVEs: CVE-2026-4149

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-191: (Pwn2Own) Linux Kernel nf_tables Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2022-32250

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-190: (Pwn2Own) VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2025-41238

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-189: (Pwn2Own) VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2025-41236

Zero Day Initiative →