Zero Day Initiative

Zero Day Initiative advisories Aug 11

ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User interaction is required to explo...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploi...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploi...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploi...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploi...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vul...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 11

ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is required to exploit this vulnera...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Aug 11

ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Windows Server. Authentication is not r...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Aug 11

ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Interaction with the Mscms.

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Microsoft Aug 11

ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to...

T1548 T1068 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 5

ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not require...

T1190

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 5

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not require...

T1190

Zero Day Initiative → Details

Zero Day Initiative advisories Aug 5

ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q...

Zero Day Initiative → Details

Zero Day Initiative advisories Check Point Jul 30

ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is requ...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 30

ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Phoenix Contact CHARX SEC-3000 devices. A...

1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 30

ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3000 devices. Authentic...

T1190 T1059 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 30

ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentic...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Jul 30

ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentic...

T1190 1 IOC

Zero Day Initiative → Details