ZDI Advisories

OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability

OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

SonicWall Email Security updateNetIf Command Injection Local Privilege Escalation Vulnerability

SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability

Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability

Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability

Microsoft Windows storport Integer Overflow Local Privilege Escalation Vulnerability

SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability

Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability

Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability

Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability

Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability

Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability

Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability