Zero Day Initiative

Zero Day Initiative CVE Jun 24

ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required ...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 24

ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability...

T1548 T1068 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 24

ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Fuji Electric Tellus. An attacker must first obtain the abil...

1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 11

ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is req...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 11

ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is re...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 11

ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vul...

T1556 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 11

ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this...

1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Apache Jun 11

ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache HTTP Server. An attacker must first obtain t...

1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Adobe Jun 10

ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of QEMU. An attacker must first obtain the ability to execute low-...

T1548 T1068 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.

2 IOCs

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.

2 IOCs

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.

T1548 2 IOCs

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not re...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is requir...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Jun 9

ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is requir...

T1190 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE Microsoft Jun 9

ZDI-26-339: Microsoft Windows Narrator Braille Support brlapi Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to...

T1548 T1068 1 IOC

Zero Day Initiative →

Zero Day Initiative CVE NVIDIA Jun 9

ZDI-26-338: NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative →