ZDI Advisories

Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability

Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability

Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability

Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability

Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability

HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability

Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability

TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability

QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability

NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability

NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability

DriveLock SQL Injection Privilege Escalation Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability