ZDI Advisories

(Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

AnyDesk Support Information Link Following Denial-of-Service Vulnerability

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability

X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability

X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability

X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability

Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability

Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability

Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability