Every 4 hours
Research · Mar 19, 2025 · ZeroDay Catalog
A critical vulnerability has been identified in the reviewdog GitHub Actions, allowing the exposure of sensitive information through embedded malicious code.
Research · Mar 11, 2025 · ZeroDay Catalog
Apple has addressed a significant out-of-bounds write vulnerability in WebKit that could allow unauthorized actions through malicious web content.
Research · Mar 11, 2025 · ZeroDay Catalog
A significant authentication bypass vulnerability has been identified in AMI's MegaRAC SPx, allowing remote attackers to exploit the Redfish Host Interface.
Research · Mar 4, 2025 · ZeroDay Catalog
A severe OS command injection vulnerability has been identified in the Edimax IC-7100 IP camera, potentially allowing remote code execution.
Research · Mar 4, 2025 · ZeroDay Catalog
A critical arbitrary write vulnerability has been identified in VMware ESXi, allowing potential kernel escapes by privileged attackers.
Research · Feb 26, 2025 · ZeroDay Catalog
A race condition vulnerability in the Linux kernel's RXRPC implementation has been addressed, impacting call timer management during packet processing.
Research · Feb 26, 2025 · ZeroDay Catalog
A slab-out-of-bounds vulnerability in the Linux kernel's TLS implementation has been fixed, addressing potential memory corruption issues.
Research · Feb 20, 2025 · ZeroDay Catalog
A critical evaluation injection vulnerability has been identified in the XWiki Platform, allowing unauthorized remote code execution. Users are urged to upgrade to mitigate risks.
Research · Feb 19, 2025 · ZeroDay Catalog
An improper access control vulnerability in Microsoft Power Pages has been mitigated, allowing affected customers to review their sites for potential exploitation.
Research · Feb 11, 2025 · ZeroDay Catalog
A heap-based buffer overflow vulnerability in the Microsoft Windows Ancillary Function Driver for WinSock has been identified, allowing local attackers to escalate privileges.
Research · Feb 10, 2025 · ZeroDay Catalog
A serious deserialization vulnerability in Wazuh Server could allow remote code execution, affecting multiple installations and configurations.
Research · Feb 3, 2025 · ZeroDay Catalog
A critical SQL injection vulnerability has been identified in Advantive VeraCore, allowing remote attackers to execute arbitrary SQL commands.
