Indicators of Compromise

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-56003

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-56002

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability

CVEs: CVE-2026-56001

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability

CVEs: CVE-2026-56000

Domains: x.org

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-12578

Zero Day Initiative →

Tenable Blog 📡 RSS Jul 14

Microsoft’s July 2026 Patch Tuesday Addresses 569 CVEs (CVE-2026-56155, CVE-2026-56164)

CVEs: CVE-2026-56155 CVE-2026-56164

Tenable Blog →

Rapid7 Blog 📡 RSS Jul 14

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

CVEs: CVE-2026-55040

Rapid7 Blog →

Cloudflare Blog 📡 RSS Jul 14

A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed

IPs: 1.1.1.1

Cloudflare Blog →

CISA Advisories 📡 RSS Jul 14

ABB Advant Master Online Builder

CVEs: CVE-2025-13162

CISA Advisories →

CISA Advisories 📡 RSS Jul 14

Rockwell Automation 1715-AENTR EtherNet/IP Adapter

CVEs: CVE-2026-10577

CISA Advisories →

CISA Advisories 📡 RSS Jul 14

CISA Urges SharePoint Hardening After New Exploitations

CVEs: CVE-2026-58644 CVE-2026-32201 CVE-2026-45659 CVE-2026-56164

CISA Advisories →

CISA Advisories 📡 RSS Jul 14

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-15409 CVE-2026-15410 CVE-2026-56155 CVE-2026-56164

CISA Advisories →

Zero Day Initiative 📡 RSS Jul 13

ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

CVEs: CVE-2026-15681

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 8

ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

CVEs: CVE-2026-15685

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 8

ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

CVEs: CVE-2026-15684

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 8

ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability

CVEs: CVE-2026-15682

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 8

ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

CVEs: CVE-2026-15683

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 8

ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability

CVEs: CVE-2026-15680

Zero Day Initiative →

Exploit Database 📡 RSS Jul 6

[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

IPs: 9.2.7.0

Exploit Database →

Exploit Database 📡 RSS Jul 6

[webapps] KeepInMind 0.8.4.2 - Stored XSS

IPs: 0.8.4.2

Exploit Database →