Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
Microsoft Qlib's StaticDataLoader can deserialize untrusted data, enabling remote code execution. Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via Qlib's RestrictedUnpickler deserialization of untrusted data, requiring user interaction.
Read more → -
ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability
An integer underflow in the IPv6 AH routing header handling can be exploited for local privilege escalation.
Read more → -
ZDI-26-835: Linux Kernel Logitech HIDPP Protocol Use-After-Free Local Privilege Escalation Vulnerability
The issue is a use-after-free in the Linux kernel’s Logitech HIDPP protocol handling. It permits local privilege escalation after low-privileged code execution.
Read more → -
ZDI-26-836: Linux Kernel CIFS File System Use-After-Free Privilege Escalation Vulnerability
A use-after-free flaw in the Linux kernel CIFS file system driver enables local privilege escalation.
Read more → -
ZDI-26-837: Linux Kernel XFRM Subsystem Use-After-Free Local Privilege Escalation Vulnerability
The advisory reports a use-after-free flaw in the Linux kernel XFRM subsystem that enables local privilege escalation.
Read more → -
ZDI-26-838: FreeBSD Kernel TTY Race Condition Local Privilege Escalation Vulnerability
The advisory reports a TTY race condition in the FreeBSD kernel that enables local privilege escalation.
Read more → -
ZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability
MLflow's PickleEvaluationArtifact can deserialize untrusted data, enabling remote code execution.
Read more → -
ZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability
MLflow Tracking Server jobs can be accessed without proper authorization, leading to information disclosure.
Read more → -
ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
Remote authenticated attackers can elevate privileges on the MLflow Tracking Server.
Read more → -
ZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
Remote attackers can achieve privilege escalation on MLflow Tracking Server after authenticating.
Read more → -
ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
MLflow's SHAP load_explainer function can deserialize untrusted data, enabling remote code execution.
Read more → -
ZDI-26-844: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
MLflow’s get-artifacts endpoint is vulnerable to unauthenticated SSRF that can disclose sensitive information.
Read more → -
ZDI-26-845: MLflow Statsmodels _load_model Deserialization of Untrusted Data Remote Code Execution Vulnerability
MLflow's Statsmodels _load_model function deserializes untrusted data, enabling remote code execution when a user opens a malicious file or visits a crafted page.
Read more → -
ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability
MLflow's webhook server can be abused for server-side request forgery. Exploitation requires valid authentication.
Read more → -
ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability
Authenticated remote attackers can trigger arbitrary server-side requests via MLflow’s AI Gateway (SSRF). The advisory assigns a CVSS score of 7.7.
Read more → -
ZDI-26-830: Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability
Safari's jsToWasm IC entrypoint suffers a type-confusion that can be triggered via a malicious page.
Read more → -
ZDI-26-831: Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability is an out-of-bounds read in CoreText’s GDEF LigCaretList handling.
Read more → -
ZDI-26-832: AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability
Local attackers can exploit avgToolsSvc link following to gain higher privileges on AVG Internet Security.
Read more → -
ZDI-26-833: Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability
Remote code execution is possible but requires authentication.
Read more → -
ZDI-26-828: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
Unauthenticated remote code execution via a stack-based buffer overflow in the Android Auto service stack of Alpine iLX-F511 devices.
Read more → -
ZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
Heap-based buffer overflow in Bluetooth OBEX packet handling can be triggered without authentication. Exploitation requires the attacker to be physically near the device.
Read more → -
ZDI-26-812: (0Day) Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability
The torch_load function in Ultralytics deserializes untrusted data, enabling remote code execution when a user loads a malicious file or page.
Read more → -
ZDI-26-813: (0Day) Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability
The vulnerability is a code injection in Ultralytics' check_det_dataset function that can lead to remote code execution when a user visits a malicious page or opens a malicious file.
Read more → -
ZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability
Remote code execution requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-815: (0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
The advisory notes that exploitation requires the victim to load a malicious page or file. Successful exploitation can lead to remote code execution through the parse_model function.
Read more → -
ZDI-26-816: (0Day) Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability
The load_dataset_cache_file function in Ultralytics deserializes untrusted data, enabling remote code execution.
Read more → -
ZDI-26-817: (0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
Code injection in Ultralytics' parse_model function can lead to remote code execution, requiring the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-818: (0Day) Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability
Remote attackers can achieve code execution on Ultralytics installations via a Google Drive download path traversal.
Read more → -
ZDI-26-819: (0Day) (Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability
The advisory notes that Alpine iLX-F511 devices can be remotely compromised without authentication.
Read more → -
ZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
The advisory reports a local privilege escalation vulnerability in Alpine iLX-F511 that requires prior low-privileged code execution.
Read more → -
ZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
A stack-based buffer overflow in the vCard parsing code can be triggered via Bluetooth on Alpine iLX-F511 devices.
Read more → -
ZDI-26-822: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
The advisory notes a stack-based buffer overflow in the Alpine iLX-F511 service stack that can be triggered without authentication. Exploitation requires the attacker to be physically present.
Read more → -
ZDI-26-823: (0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
A stack-based buffer overflow in prh_sdp_service_search_decode can be triggered via a paired Bluetooth device.
Read more → -
ZDI-26-824: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability
Unauthenticated remote code execution is possible on Alpine iLX-F511 devices via a network-adjacent attack.
Read more → -
ZDI-26-825: (0Day) (Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability
Unauthenticated command injection can be triggered locally on Alpine iLX-F511 devices.
Read more → -
ZDI-26-826: (0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability
The advisory reports an out-of-bounds read in libanwbtstack.so's prh_rfcomm_cc_process_test function, resulting in information disclosure. Exploitation requires pairing a malicious Bluetooth device.
Read more → -
ZDI-26-827: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
The advisory notes a stack-based buffer overflow in the Android Auto Connection Handler of Alpine iLX-F511 devices.
Read more → -
ZDI-26-810: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability
Unauthenticated remote attackers can retrieve cleartext authentication data from MailEnable.
Read more → -
ZDI-26-811: MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability
MailEnable’s parseObjectResponse function is vulnerable to XML external entity processing that can disclose sensitive information.
Read more → -
ZDI-26-792: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
Unauthenticated remote code execution is possible via an out-of-bounds write in libwebsockets' MQTT PUBACK handling.
Read more → -
ZDI-26-793: Meta FAIRChem load_and_preprocess_data Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data, but requires the victim to load a malicious page or file.
Read more → -
ZDI-26-794: Meta FAIRChem ion_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-795: Meta FAIRChem reaction_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data, but requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-796: Meta FAIRChem reaction adsorbate_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-797: Meta FAIRChem dense_eval dft-compute Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-798: Meta FAIRChem dense_eval results-file Deserialization of Untrusted Data Remote Code Execution Vulnerability
Deserialization of untrusted data in Meta FAIRChem dense_eval results files can lead to remote code execution when a user opens a malicious file or visits a malicious page.
Read more → -
ZDI-26-799: Meta FAIRChem Solvent Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-800: Meta FAIRChem OMolRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-801: Meta FAIRChem Slab Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-802: Meta FAIRChem process_mlrs Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data, but requires the victim to open a malicious page or file.
Read more → -
ZDI-26-803: Meta FAIRChem AdsorbMLRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability
Deserialization of untrusted data can lead to remote code execution, but requires the victim to load a malicious page or file.
Read more → -
ZDI-26-804: Meta FAIRChem Bulk Class Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to load a malicious page or file. Successful exploitation leads to remote code execution.
Read more → -
ZDI-26-805: Meta FAIRChem Adsorbate Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution can be triggered by deserialization of untrusted data, but requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-806: Meta FAIRChem write_top_k_vasp Deserialization of Untrusted Data Remote Code Execution Vulnerability
The write_top_k_vasp function deserializes untrusted data.
Read more → -
ZDI-26-807: Meta FAIRChem get_computational_df_to_predict Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-808: Meta FAIRChem run_validation Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to load a malicious page or file, leading to remote code execution via deserialization of untrusted data.
Read more → -
ZDI-26-809: Meta FAIRChem dense_eval dft-targets Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-791: Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
The advisory notes a double-free in OpenUSD’s crate file parser that can be triggered remotely.
Read more → -
ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
Unauthenticated remote code execution via a heap-based buffer overflow in NoMachine's nxwebrunner.
Read more → -
ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability
NVIDIA Megatron Bridge can execute arbitrary code when processing a malicious YAML file.
Read more → -
ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability
The advisory notes a stack-based buffer overflow in Snort’s OLE VBA decompression routine.
Read more → -
ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability
Unauthenticated remote attackers can trigger an externally-controlled format string in OpenSSL's CMP implementation to disclose sensitive information.
Read more → -
ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability
OpenSSL's CMS AuthEnvelopedData implementation fails to properly validate the integrity check value, enabling message tampering.
Read more → -
ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability
The advisory reports a use-after-free bug in the FreeBSD kernel’s kqueue implementation that enables local privilege escalation.
Read more → -
ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation in the FreeBSD kernel via a shared memory TOCTOU bug.
Read more → -
ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability
LibreOffice contains an integer overflow in EMF+ brush handling that can be triggered remotely. Exploitation requires a user to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
LibreOffice's PDF parser contains a heap-based buffer overflow that can be triggered remotely.
Read more → -
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
LibreOffice's PDF parser has an out-of-bounds write that can be triggered by a crafted PDF.
Read more → -
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
The XSLT debugger in Sparx Systems Enterprise Architect processes external entities, enabling information disclosure.
Read more → -
ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability
The advisory reports a use-after-free in X.Org Server’s GestureBuildSprite function that can disclose information.
Read more → -
ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
Adobe Photoshop's PDF JPEG parsing suffers an integer overflow that can lead to remote code execution.
Read more → -
ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
Docker Buildx can be remotely compromised if a user visits a malicious page or opens a malicious file.
Read more → -
ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability
The issue is a double-free in X.Org Server’s XKB TextDoodad handling.
Read more → -
ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
The advisory reports a use-after-free in X.Org Server’s Present extension that can disclose information.
Read more → -
ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability
A use-after-free in X.Org Server’s XInput passive grab handling can lead to information disclosure.
Read more → -
ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in X.Org Server’s GLX RenderLarge path can be used for local privilege escalation.
Read more → -
ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability
The XkbResizeKeyType function in X.Org Server contains a numeric truncation that can be exploited for local privilege escalation.
Read more → -
ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server's XFixes Pointer Barrier can enable local privilege escalation.
Read more → -
ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in X.Org Server's XKB handling enables local privilege escalation.
Read more → -
ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability
The advisory notes a heap-based buffer overflow in the RandR extension of X.Org Server that can be used for local privilege escalation.
Read more → -
ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in the Glamor CopyArea function of X.Org Server enables local privilege escalation.
Read more → -
ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server’s XInput ProcXIPassiveUngrabDevice function enables local privilege escalation.
Read more → -
ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability
The X.Org Server XKB XkbSetMap request can trigger an out-of-bounds read, resulting in information disclosure.
Read more → -
ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability
Authentication is required to exploit the directory traversal remote code execution in SonicWall Secure Mobile Access.
Read more → -
ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability
Remote attackers can bypass authentication on FortiSandbox without credentials.
Read more → -
ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
Authenticated remote attackers can cause a denial-of-service on FortiSandbox.
Read more → -
ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
The advisory notes that the NoMachine named pipe is assigned overly permissive permissions, enabling local privilege escalation.
Read more → -
ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The advisory notes that the flaw permits local privilege escalation on NoMachine. Exploitation requires prior low-privileged code execution.
Read more → -
ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
Heap-based buffer overflow in GStreamer’s rtpL16depay element enables remote code execution.
Read more → -
ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
Unauthenticated remote code execution via a syslog format-string flaw on QNAP TS-453E devices.
Read more → -
ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
Telegram's rlottie library has a numeric truncation flaw that can enable remote code execution when a user opens a crafted file or visits a malicious page.
Read more → -
ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data in Genesis World's load_checkpoint library.
Read more → -
ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability
Remote code execution is possible via the decompress_usdz function in Genesis World.
Read more → -
ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability
The advisory reports a directory traversal in Genesis World's MJCF library that can disclose sensitive information.
Read more → -
ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability
Remote attackers can disclose sensitive information via a directory traversal in Genesis World.
Read more → -
ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability
Genesis World’s glTF library is vulnerable to SSRF, enabling remote attackers to trigger arbitrary server-side requests.
Read more → -
ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory reports a TOCTOU privilege escalation flaw in the Windows dxgkrnl driver.
Read more →
Page 1 of 8 · 755 advisories