https://knutmichael.com/radar/2026-07-29-2026-minimum-elements-for-a-software-bill-of-materials-sbom Knut Michael Haugland en 2026-07-29T12:00:00+02:00 2026 Minimum Elements for a Software Bill of Materials (SBOM) https://knutmichael.com/radar/2026-07-29-cisa-adds-one-known-exploited-vulnerability-to-catalog Knut Michael Haugland en 2026-07-29T12:00:00+02:00 CISA Adds One Known Exploited Vulnerability to Catalog https://knutmichael.com/radar/2026-07-29-zdi-26-496-trend-ai-cleaner-one-pro-link-following-arbitrary-file-deletion-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-467-gstreamer-rtpsbcdepay-use-after-free-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-492-apple-macos-imageio-numeric-truncation-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-463-gstreamer-mrf-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-483-nomachine-getstat-command-injection-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-488-pwn2own-kenwood-dnr1007xr-vcardparser-heap-based-buffer-overflow-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-459-gimp-sgi-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-479-heimdall-data-database-proxy-uploadjar-directory-traversal-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-455-gimp-tif-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-475-pwn2own-sony-xav-9500es-avrcpbrresponseparser-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-500-watchguard-fireware-os-networkd-networkwirelesskickoffusercb-stack-based-buffer-overflow-remote-code-executio Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-471-pwn2own-sony-xav-9500es-prhl2decodepacket-out-of-bounds-read-information-disclosure-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-495-pwn2own-vmware-esxi-vmxnet3-espqueuemask-out-of-bounds-write-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-466-gstreamer-png-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-486-pwn2own-kenwood-dnr1007xr-tchdrbytestreamread-out-of-bounds-write-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-491-apple-macos-coreaudio-out-of-bounds-write-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-462-gimp-apng-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-482-progress-software-kemp-loadmaster-enablexroot-use-of-hard-coded-cryptographic-key-privilege-escalation-vulner Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-487-pwn2own-kenwood-dnr1007xr-udhcpd-incorrect-permission-assignment-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-458-gimp-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-478-adminer-multiquery-incorrect-check-of-function-return-value-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-454-gimp-psd-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-474-pwn2own-sony-xav-9500es-l2reassemblesdu-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-499-watchguard-fireware-os-cli-token-parser-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-470-aeon-loadtimeseriessegmentationbenchmark-code-injection-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-494-apple-macos-usd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-465-gstreamer-ogg-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-485-pwn2own-kenwood-dnr1007xr-jkgenservice-command-injection-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-490-pwn2own-kenwood-dnr1007xr-usb-incorrect-default-permissions-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-461-gimp-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-481-progress-software-kemp-loadmaster-access-missing-authorization-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-457-gimp-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-477-pwn2own-sony-xav-9500es-crash-dump-handler-command-injection-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-453-gimp-hdr-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-473-pwn2own-sony-xav-9500es-gpsd-buffer-overflow-arbitrary-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-498-trendai-vision-one-incorrect-privilege-assignment-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-469-aeon-loadhumanactivitysegmentationdatasets-code-injection-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-468-aeon-loadrehabpiledataset-deserialization-of-untrusted-data-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-493-apple-macos-usd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-464-gstreamer-mrf-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-484-pwn2own-kenwood-dnr1007xr-firmware-update-link-following-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-489-pwn2own-kenwood-dnr1007xr-startupdateprocess-command-injection-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-460-gimp-tif-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-480-osnexus-quantastor-missing-authentication-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-456-gimp-tif-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-476-pwn2own-sony-xav-9500es-udev-usb-rules-authorization-bypass-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-501-watchguard-fireware-os-sigd-compstartcb-directory-traversal-arbitrary-file-creation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-472-pwn2own-sony-xav-9500es-rtsp-setup-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-497-trendai-vision-one-service-gateway-logs-information-disclosure-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability