ZDI Advisories

pdfforge

PDFforge is a software company known for PDF creation and manipulation tools.

Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability

Deciso OPNsense contains a code execution vulnerability (CVE-2026-2035) that allows authenticated network-adjacent attackers to execute arbitrary…

Ivanti Endpoint Manager AuthHelper Authentication Bypass Vulnerability

Ivanti Endpoint Manager contains an authentication bypass vulnerability (CVE-2026-1603) that allows remote attackers to gain unauthorized access…

Ivanti Endpoint Manager ROI SQL Injection Remote Code Execution Vulnerability

Ivanti Endpoint Manager contains a high-severity vulnerability (CVE-2026-1602, CVSS 7.2) that allows authenticated remote attackers to execute…

Microsoft Windows searchConnector-ms NTLM Response Information Disclosure Vulnerability

This vulnerability in Microsoft Windows allows attackers to capture and disclose NTLM authentication responses, a critical component used for network…

NI

National Instruments (NI) has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication, allowing an…

NoMachine

NoMachine, a remote desktop and access software vendor, has a high-severity vulnerability (CVSS 7.1) that requires local access and low-level user…

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

A remote code execution vulnerability in Xmind (CVE-2026-0777) with a high CVSS score of 7.8 allows attackers to execute arbitrary code if users are…

Krita

Krita is a free, open-source digital painting and illustration software commonly used by artists and designers.

DriveLock

DriveLock is a German endpoint security and data protection software vendor.

Krita

Krita is a popular open-source digital painting and illustration software application.

NoMachine

NoMachine, a remote desktop and access software provider, has a high-severity vulnerability (CVSS 7.8) that requires local access and low-level user…

DriveLock

DriveLock is a German endpoint security and data protection vendor.

Krita

Krita is a widely-used open-source digital painting and illustration software.

DriveLock

DriveLock is a German endpoint security and data protection vendor.

DriveLock

DriveLock is a German endpoint security and data protection vendor.

Krita

Krita is a popular open-source digital painting and illustration software application.

Krita

Krita is a popular open-source digital painting and illustration software.

DriveLock

DriveLock is a German endpoint security and data protection company known for device control and encryption solutions.

Adobe ColdFusion CAR File Parsing Directory Traversal Remote Code Execution Vulnerability

Adobe ColdFusion contains a vulnerability (CVE-2025-61808) that allows authenticated attackers to execute arbitrary code on affected systems, rated…

Ashlar-Vellum

Ashlar-Vellum is a software company known for CAD and design tools.

Delta Electronics

Delta Electronics, a major manufacturer of power supplies and industrial automation components, has a high-severity vulnerability (CVSS 7.8) that…

Lexmark CX532adwe execuserobject Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability in Lexmark CX532adwe printers allows unauthenticated network-adjacent attackers to execute arbitrary code with a CVSS score of…

NVIDIA

NVIDIA is a major technology company known for graphics processors, AI chips, and data center hardware.

Hugging Face

Hugging Face is a well-known AI/machine learning platform that provides pretrained models and collaborative tools for developers.

Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerability

Docker Desktop for Windows contains a privilege escalation vulnerability (CVE-2025-14740) that allows local attackers to gain elevated privileges if…

Hugging Face

Hugging Face is a well-known AI/ML platform that hosts machine learning models and provides collaborative tools for developers.

Lexmark CX532adwe getCFFNames Heap-based Buffer Overflow Remote Code Execution Vulnerability

A critical remote code execution vulnerability affects Lexmark CX532adwe printers, allowing network-adjacent attackers to execute arbitrary code…

Lexmark CX532adwe usecmap Type Confusion Remote Code Execution Vulnerability

A critical unauthenticated remote code execution vulnerability (CVE-2025-65080) has been discovered in Lexmark CX532adwe multifunction printers,…

NVIDIA

NVIDIA, a leading manufacturer of graphics processors and AI computing hardware, has a high-severity local vulnerability (CVSS 7.8) that requires…