ZDI Advisories

Meta

Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…

Meta

Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…

Apple

Apple has disclosed a high-severity vulnerability (CVSS 8.8) that can be exploited remotely without authentication or special privileges, requiring…

Meta

Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but requires no…

Meta

Meta, a major social media and technology company, has a local privilege escalation vulnerability with a CVSS score of 7.8 that requires user…

Telegram

Telegram is a widely-used encrypted messaging and communication platform with millions of users globally.

Meta

Meta, the social media and technology conglomerate behind Facebook, Instagram, and other platforms, has a high-severity local vulnerability (CVSS…

Meta

Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…

Meta

Meta, a major social media and technology company, has a local privilege escalation vulnerability with a CVSS score of 7.8 that requires user…

Meta

Meta, the technology company behind Facebook and Instagram, has a high-severity local vulnerability (CVSS 7.8) that requires no authentication and…

Meta

Meta, the social media and technology company behind Facebook, Instagram, and other platforms, has a high-severity vulnerability (CVSS 7.8) that…

MLflow

MLflow is an open-source machine learning platform used for experiment tracking, model management, and deployment.

ASUS

ASUS, a major Taiwanese manufacturer of computers, networking equipment, and consumer electronics, has a high-severity local privilege escalation…

MLflow

MLflow is an open-source machine learning platform used for experiment tracking and model management.

Adobe

Adobe, a leading software company known for creative and productivity applications, has a high-severity local privilege escalation vulnerability…

WatchGuard

WatchGuard is a network security company known for firewalls and threat management solutions.

vLLM

vLLM is an open-source library for running large language models efficiently.

Oracle

Oracle, a major software and cloud services provider, has a high-severity vulnerability (CVSS 7.5) that requires local access and high-level…

Dify

Dify is an open-source low-code platform for building AI applications and workflows.

Adobe

Adobe, a leading software company known for creative and productivity applications, has a medium-severity vulnerability (CVSS 5.4) that can be…

OriginLab

OriginLab Corporation develops OriginPro, a widely-used data analysis and graphing software popular in scientific and engineering communities.

TrendAI

TrendAI is a vendor in the artificial intelligence/machine learning security space.

Fortinet

Fortinet is a well-known cybersecurity vendor specializing in network security appliances and firewall solutions.

Microsoft Azure MCP AzureCliService Command Injection Remote Code Execution Vulnerability

A critical remote code execution vulnerability (CVSS 9.8) has been discovered in Microsoft Azure that requires no authentication to exploit, allowing…

Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability

Samsung Galaxy S25 devices contain a remote information disclosure vulnerability (CVE-2025-58488) that allows attackers to access sensitive data if…

Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability

A medium-severity security bypass vulnerability (CVE-2025-58487) has been identified in Samsung Galaxy S25 devices that allows remote attackers to…

Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability

CVE-2025-14233 is a critical unauthenticated remote code execution vulnerability affecting Canon imageCLASS MF654Cdw printers that allows…

Samsung Galaxy S25 Samsung Account Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability in Samsung Galaxy S25 allows unauthenticated remote attackers to execute arbitrary scripts on affected devices, potentially…

G DATA

G DATA is a German cybersecurity firm known for antivirus and endpoint protection software.

Arista

Arista is a well-known networking equipment vendor that produces switches, routers, and cloud networking solutions.