ZDI Advisories

Microsoft

Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit,…

Bosch Rexroth

Bosch Rexroth is a major industrial automation and hydraulics manufacturer whose products are widely deployed in manufacturing and infrastructure…

LiteLLM

LiteLLM, a popular open-source library that provides a unified interface for multiple large language models, has a high-severity vulnerability (CVSS…

Cisco

Cisco, a major networking and cybersecurity equipment manufacturer, has a high-severity vulnerability (CVSS 7.2) that can be exploited remotely over…

Microsoft

Microsoft has patched a low-severity information disclosure vulnerability (CVSS 3.5) that requires adjacent network access and user interaction to…

X.Org

X.Org is the open-source organization responsible for the X Window System, the fundamental display server used in most Linux and Unix environments.

Cisco

This vulnerability affects Cisco, a major networking and cybersecurity infrastructure vendor.

Signal

Signal is a widely-used encrypted messaging application known for providing end-to-end encrypted communications to millions of users globally.

Samsung

Samsung, a major consumer electronics and computing manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and…

Ashlar-Vellum

Ashlar-Vellum is a software company known for architectural and design tools used by professionals in construction and engineering.

Hugging Face

Hugging Face is a well-known AI/ML platform that hosts machine learning models and provides collaborative development tools for the AI community.

mcp-kubernetes-server

The mcp-kubernetes-server, a Kubernetes management component, contains a critical remote code execution vulnerability (CVSS 9.8) that requires no…

Bosch Rexroth

Bosch Rexroth, a major industrial automation and hydraulics manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and…

Fortinet

Fortinet is a major cybersecurity vendor known for firewalls, VPNs, and network security appliances.

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.5) that requires local access and high-level privileges to exploit, but delivers significant…

Fortinet

Fortinet is a major cybersecurity company known for network firewalls and security appliances.

Bosch Rexroth

Bosch Rexroth is a major industrial automation and hydraulics manufacturer whose products are widely used in manufacturing and control systems.

Linux

This vulnerability affects Linux, the widely-used open-source operating system kernel used across servers, desktops, and embedded systems worldwide.

QNAP

QNAP is a well-known manufacturer of network-attached storage (NAS) devices and storage solutions for both enterprise and consumer markets.

Ashlar-Vellum

Ashlar-Vellum is a software company known for 2D and 3D design and drafting tools used in architecture and engineering.

Linux

Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide.

Synology

Synology, a well-known network-attached storage (NAS) and surveillance solutions provider, has a medium-severity vulnerability (CVSS 4.3) that…

Krita

Krita is a well-known open-source digital painting and illustration software application.

GIMP

GIMP is a widely-used open-source image editing application, and this high-severity vulnerability (CVSS 7.8) can be exploited locally without…

Synology

Synology is a network-attached storage (NAS) and surveillance system vendor.

Synology

Synology is a well-known network storage and surveillance systems vendor.

pdfforge

PDFforge is a software company known for PDF creation and editing tools.

Ivanti

Ivanti is a well-known enterprise IT management and cybersecurity software vendor.

MindsDB

MindsDB is an open-source machine learning and AI database platform that allows developers to build AI applications with simplified data access.

QEMU

QEMU is a widely-used open-source machine emulator and virtualization platform.