Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
ZDI-26-133: (Pwn2Own) Music Assistant _update_library_item External Control of File Path Remote Code Execution Vulnerability
The vulnerability involves external control of a file path in Music Assistant's _update_library_item function, enabling remote code execution without authentication.
Read more → -
ZDI-26-134: Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability
The vulnerability enables remote authentication bypass on HPE AutoPass License Server without requiring any credentials.
Read more → -
ZDI-26-135: LangChain LangGraph BaseCache Deserialization of Untrusted Data Remote Code Execution Vulnerability
The vulnerability involves deserialization of untrusted data in LangChain LangGraph, which could lead to remote code execution without authentication.
Read more → -
ZDI-26-136: Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability
The vulnerability permits remote code execution without authentication on Trend Micro Apex One Console via a directory traversal.
Read more → -
ZDI-26-137: Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability
The vulnerability does not require authentication, enabling unauthenticated remote attackers to exploit the condition.
Read more → -
ZDI-26-138: Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability
The vulnerability involves link following in the Trend Micro Apex One Virus Scan Engine, which may allow local privilege escalation under specific conditions.
Read more → -
ZDI-26-139: Trend Micro Apex One Security Agent iCore Service Origin Validation Error Local Privilege Escalation Vulnerability
The vulnerability requires local code execution as a precondition for privilege escalation. The advisory assigns a CVSS score of 7.8.
Read more → -
ZDI-26-140: Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability
Local privilege escalation vulnerability in Trend Micro Apex One Security Agent requires initial access.
Read more → -
ZDI-26-141: Trend Micro Apex One Security Agent iCore Service Signature Verification Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The vulnerability involves a time-of-check time-of-use (TOCTOU) issue in the iCore Service's signature verification process, potentially allowing local privilege escalation.
Read more → -
ZDI-26-142: Trend Micro Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The vulnerability requires an attacker to already have low-privileged code execution on the target system. The assigned CVSS score is 7.8.
Read more → -
ZDI-26-143: Trend Micro Apex One Security Agent TmSelfProtect Origin Validation Error Local Privilege Escalation Vulnerability
An origin validation error in the TmSelfProtect component allows local privilege escalation.
Read more → -
ZDI-26-144: Trend Micro Apex Central Hub Server Server-Side Request Forgery Vulnerability
The vulnerability requires authentication and could allow remote information disclosure via server-side request forgery.
Read more → -
ZDI-26-145: Trend Micro Apex Central Scheduled Update Server-Side Request Forgery Vulnerability
The vulnerability requires authentication and could allow remote information disclosure via server-side request forgery.
Read more → -
ZDI-26-146: Trend Micro Apex Central Manual Update Server-Side Request Forgery Vulnerability
The vulnerability requires authentication and could allow remote information disclosure via a server-side request forgery (SSRF) in Trend Micro Apex Central.
Read more → -
ZDI-26-147: Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability
The vulnerability requires authentication before privilege escalation can occur in Trend Micro Apex Central.
Read more → -
ZDI-26-148: Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability
The vulnerability requires authentication and allows privilege escalation in Trend Micro Apex Central.
Read more → -
ZDI-26-149: Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability
The vulnerability requires local execution of low-privileged code to trigger denial-of-service. The advisory notes a CVSS score of 5.0.
Read more → -
ZDI-26-150: Docker Desktop for Mac Docker Model Runner Exposed Dangerous Function Denial-of-Service Vulnerability
The vulnerability resides in Docker Desktop for Mac's Docker Model Runner, which exposes a function that can be triggered by local attackers to cause a denial-of-service condition.
Read more → -
ZDI-26-124: claude-hovercraft executeClaudeCode Command Injection Remote Code Execution Vulnerability
The vulnerability in claude-hovercraft permits remote code execution via command injection without requiring authentication.
Read more → -
ZDI-26-125: Docker Desktop grpcfuse Kernel Module Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability requires local execution of low-privileged code on a target system. It affects Docker Desktop's grpcfuse kernel module.
Read more → -
ZDI-26-126: (Pwn2Own) Ubiquiti Networks AI Pro Discovery Protocol Missing Encryption Protocol Downgrade Vulnerability
The advisory notes a protocol downgrade vulnerability in Ubiquiti Networks AI Pro's Discovery Protocol that can be exploited without authentication.
Read more → -
ZDI-26-127: (Pwn2Own) Ubiquiti Networks AI Pro Cleartext Transmission Information Disclosure Vulnerability
Ubiquiti AI Pro transmits sensitive information in cleartext without requiring authentication. Network-adjacent attackers can exploit this to disclose data.
Read more → -
ZDI-26-128: (Pwn2Own) Ubiquiti Networks AI Pro Uncaught Exception Denial-of-Service Vulnerability
Network-adjacent attackers can trigger denial-of-service without authentication. The vulnerability was demonstrated during Pwn2Own 2026.
Read more → -
ZDI-26-129: Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability
Network-adjacent attackers can bypass authentication on Socomec DIRIS A-40 power monitoring devices. The vulnerability does not require authentication to exploit.
Read more → -
ZDI-26-130: IceWarp collaboration Directory Traversal Information Disclosure Vulnerability
The vulnerability permits unauthenticated remote attackers to disclose sensitive information via a directory traversal flaw in IceWarp's collaboration component.
Read more → -
ZDI-26-131: Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The vulnerability stems from uncontrolled search path behavior in Siemens SINEC NMS, which may allow local privilege escalation if exploited.
Read more → -
ZDI-26-132: Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The vulnerability stems from uncontrolled search path behavior in Siemens SINEC NMS, allowing local privilege escalation when low-privileged code execution is already achieved.
Read more → -
ZDI-26-123: Docker Desktop MCP Server Cleartext Storage of Sensitive Information Vulnerability
Docker Desktop stores sensitive information in cleartext. Exploitation requires local code execution.
Read more → -
ZDI-26-108: Bosch Rexroth IndraWorks UA.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability
The vulnerability requires user interaction via a malicious page or file to trigger remote code execution.
Read more → -
ZDI-26-109: Bosch Rexroth IndraWorks OPC.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability
This vulnerability requires user interaction through a malicious file or page. The advisory assigns a CVSS rating of 7.8.
Read more → -
ZDI-26-110: Bosch Rexroth IndraWorks Print Settings File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability
The vulnerability requires user interaction, such as opening a malicious file or visiting a malicious page, to trigger remote code execution via deserialization of untrusted data.
Read more → -
ZDI-26-111: MLflow Use of Default Password Authentication Bypass Vulnerability
The advisory notes a default password authentication bypass in MLflow that does not require authentication to exploit.
Read more → -
ZDI-26-112: Dassault Systèmes eDrawings Viewer EPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability
The vulnerability stems from uninitialized variable usage during EPRT file parsing in eDrawings Viewer, requiring user interaction to trigger.
Read more → -
ZDI-26-113: Dassault Systèmes eDrawings Viewer EPRT File Parsing Memory Corruption Remote Code Execution Vulnerability
The vulnerability involves memory corruption during EPRT file parsing in eDrawings Viewer, requiring user interaction for exploitation.
Read more → -
ZDI-26-114: Dassault Systèmes eDrawings Viewer EPRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
The vulnerability involves an out-of-bounds write during EPRT file parsing, which could allow remote code execution if a user opens a malicious file.
Read more → -
ZDI-26-115: Fortinet FortiClient VPN FCConfig Utility Link Following Local Privilege Escalation Vulnerability
This vulnerability requires local code execution first, limiting its immediate impact.
Read more → -
ZDI-26-116: TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The vulnerability requires local access and low-privileged code execution to exploit. The advisory notes a CVSS score of 7.0.
Read more → -
ZDI-26-117: RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability
A local attacker with low privileges can exploit this vulnerability to disclose sensitive information from RustDesk Client for Windows installations.
Read more → -
ZDI-26-118: GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability
The vulnerability stems from uninitialized memory usage during PGM file parsing in GIMP, which could lead to remote code execution if a user opens a malicious file.
Read more → -
ZDI-26-119: GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
The vulnerability involves an out-of-bounds write during XWD file parsing in GIMP, requiring user interaction to trigger.
Read more → -
ZDI-26-120: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
The vulnerability is triggered by parsing a malicious ICNS file, leading to a heap-based buffer overflow in GIMP.
Read more → -
ZDI-26-121: GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
The vulnerability involves an out-of-bounds write during XWD file parsing in GIMP, which could allow remote code execution if a user opens a malicious file.
Read more → -
ZDI-26-122: PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
PDF-XChange Editor contains a local privilege escalation vulnerability in its TrackerUpdate component. Exploitation requires prior low-privileged code execution on the target system.
Read more → -
ZDI-26-106: Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
The vulnerability involves an out-of-bounds write during CATPART file parsing in Autodesk AutoCAD, requiring user interaction for exploitation.
Read more → -
ZDI-26-107: Autodesk AutoCAD MODEL File Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability requires user interaction via opening a malicious file or visiting a malicious page.
Read more → -
ZDI-26-096: Dassault Systèmes eDrawings Viewer EPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
The vulnerability requires user interaction via a malicious file or page. A heap-based buffer overflow enables remote code execution.
Read more → -
ZDI-26-097: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
The vulnerability requires prior execution of high-privileged code on the guest. The heap-based buffer overflow occurs in the VMSVGA component.
Read more → -
ZDI-26-098: Oracle VirtualBox VMSVGA Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability requires prior high-privileged code execution on a guest system to escalate privileges. The ZDI assigned a CVSS rating of 8.2.
Read more → -
ZDI-26-099: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability
Requires prior high-privileged code execution on the guest system. Exploitation is constrained to a race condition within the VMSVGA component.
Read more → -
ZDI-26-100: Oracle VirtualBox LsiLogic Uninitialized Memory Information Disclosure Vulnerability
The vulnerability requires a local attacker with high-privileged guest code execution to exploit. It targets Oracle VirtualBox's LsiLogic SCSI controller component.
Read more → -
ZDI-26-101: Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability
The vulnerability requires local execution of high-privileged code on a guest system. The CVSS rating is 6.0.
Read more → -
ZDI-26-102: Oracle VirtualBox VMSVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability
The vulnerability requires an attacker to already have high-privileged code execution on the guest system. The exploit targets the VirtualBox VMSVGA virtual device.
Read more → -
ZDI-26-103: Oracle VirtualBox VMSVGA Out-Of-Bounds Access Local Privilege Escalation Vulnerability
This vulnerability requires an attacker to already have high-privileged code execution on the guest system. The exploit targets the VMSVGA virtual graphics component within Oracle VirtualBox.
Read more → -
ZDI-26-104: Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability
The vulnerability is triggered by parsing a malicious DCM file, requiring user interaction to open the file or visit a malicious page.
Read more → -
ZDI-26-105: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
The vulnerability affects the MLflow Tracking Server's Artifact Handler, allowing remote code execution via directory traversal without authentication.
Read more →
Page 8 of 8 · 755 advisories