ZDI Advisories

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability

Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability

Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability

Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability

ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability

Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability

Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability