ZDI Advisories

Flowise

Flowise is an open-source platform for building AI applications and workflows.

Flowise

Flowise is a popular open-source low-code platform for building AI applications and chatbots.

Linux

Linux kernel vulnerability CVE classified as HIGH severity (CVSS 7.5) requires local access and high-level privileges to exploit, but can result in…

Microsoft

Microsoft has disclosed a low-severity local information disclosure vulnerability (CVSS 3.3) that requires user interaction to exploit but no…

Trend Micro

Trend Micro is a major cybersecurity vendor that provides antivirus, endpoint protection, and cloud security solutions.

Trend Micro

Trend Micro is a well-known cybersecurity software vendor specializing in antivirus, endpoint protection, and threat defense solutions.

Mozilla

Mozilla, the company behind the Firefox browser and related internet services, has a critical vulnerability (CVSS 8.8) that can be exploited remotely…

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to…

AzeoTech

AzeoTech is a software company known for industrial automation and SCADA/HMI (human-machine interface) platforms.

AzeoTech

AzeoTech is a software company known for industrial automation and SCADA control systems.

Microsoft

Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the network without authentication, though it requires…

Microsoft

Microsoft, a major software and cloud services provider, has a high-severity vulnerability (CVSS 7.6) that can be exploited remotely without…

GNU

GNU is the open-source software foundation behind widely-used tools like GCC compiler and core Linux utilities, making this vulnerability potentially…

Meta

Meta, the social media and technology conglomerate behind Facebook, Instagram, and other platforms, has a high-severity local vulnerability (CVSS…

Meta

Meta, the social media and technology conglomerate behind Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that…

Meta

Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…

Meta

Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…

ASUS

ASUS, a major manufacturer of consumer and enterprise computing hardware and components, has a high-severity local privilege escalation vulnerability…

Meta

Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but…

Meta

Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…

Meta

Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity vulnerability (CVSS 7.8) that requires local access and user…

JumpCloud

JumpCloud is a cloud-based directory and identity management platform used for managing user access across IT environments.

ByteDance

ByteDance, the Chinese technology company behind TikTok and other platforms, has a high-severity local vulnerability (CVSS 7.8) that requires user…

Apple

Apple has a local vulnerability (CVE pending) with low severity that requires user interaction to exploit but could lead to minor information…

Apple

Apple has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely without authentication, though it requires user interaction and…

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers complete system…

NGINX

NGINX is a widely-used open-source web server and reverse proxy software that handles traffic for millions of websites globally.

verl

A high-severity vulnerability (CVSS 8.1) has been identified in Verl, affecting the confidentiality, integrity, and availability of impacted systems.

Adminer

Adminer is a popular web-based database management tool that allows remote administration of databases.