https://knutmichael.com/radar/2026-07-29-cisa-adds-one-known-exploited-vulnerability-to-catalog Knut Michael Haugland en 2026-07-29T12:00:00+02:00 CISA Adds One Known Exploited Vulnerability to Catalog https://knutmichael.com/radar/2026-07-29-2026-minimum-elements-for-a-software-bill-of-materials-sbom Knut Michael Haugland en 2026-07-29T12:00:00+02:00 2026 Minimum Elements for a Software Bill of Materials (SBOM) https://knutmichael.com/radar/2026-07-29-zdi-26-475-pwn2own-sony-xav-9500es-avrcpbrresponseparser-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-471-pwn2own-sony-xav-9500es-prhl2decodepacket-out-of-bounds-read-information-disclosure-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-467-gstreamer-rtpsbcdepay-use-after-free-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-463-gstreamer-mrf-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-483-nomachine-getstat-command-injection-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-459-gimp-sgi-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-479-heimdall-data-database-proxy-uploadjar-directory-traversal-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-455-gimp-tif-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-454-gimp-psd-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-474-pwn2own-sony-xav-9500es-l2reassemblesdu-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-470-aeon-loadtimeseriessegmentationbenchmark-code-injection-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-466-gstreamer-png-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-486-pwn2own-kenwood-dnr1007xr-tchdrbytestreamread-out-of-bounds-write-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-462-gimp-apng-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-482-progress-software-kemp-loadmaster-enablexroot-use-of-hard-coded-cryptographic-key-privilege-escalation-vulner Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-458-gimp-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-478-adminer-multiquery-incorrect-check-of-function-return-value-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-453-gimp-hdr-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-473-pwn2own-sony-xav-9500es-gpsd-buffer-overflow-arbitrary-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-469-aeon-loadhumanactivitysegmentationdatasets-code-injection-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-465-gstreamer-ogg-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-485-pwn2own-kenwood-dnr1007xr-jkgenservice-command-injection-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-461-gimp-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-481-progress-software-kemp-loadmaster-access-missing-authorization-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-457-gimp-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-477-pwn2own-sony-xav-9500es-crash-dump-handler-command-injection-local-privilege-escalation-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-472-pwn2own-sony-xav-9500es-rtsp-setup-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-468-aeon-loadrehabpiledataset-deserialization-of-untrusted-data-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-464-gstreamer-mrf-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-484-pwn2own-kenwood-dnr1007xr-firmware-update-link-following-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-460-gimp-tif-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-480-osnexus-quantastor-missing-authentication-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-456-gimp-tif-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-07-29-zdi-26-476-pwn2own-sony-xav-9500es-udev-usb-rules-authorization-bypass-vulnerability Knut Michael Haugland en 2026-07-29T00:00:00+02:00 ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability https://knutmichael.com/radar/2026-07-28-siemens-simatic-s7-plcsim-advanced Knut Michael Haugland en 2026-07-28T12:00:00+02:00 Siemens SIMATIC S7-PLCSIM Advanced https://knutmichael.com/radar/2026-07-28-igloohome-smart-lock-mobile-application Knut Michael Haugland en 2026-07-28T12:00:00+02:00 igloohome Smart Lock Mobile Application https://knutmichael.com/radar/2026-07-28-ci-fortify-advice-for-isolating-vital-systems Knut Michael Haugland en 2026-07-28T12:00:00+02:00 CI Fortify – Advice for isolating vital systems https://knutmichael.com/radar/2026-07-28-siemens-desigo-cc Knut Michael Haugland en 2026-07-28T12:00:00+02:00 Siemens Desigo CC https://knutmichael.com/radar/2026-07-28-siemens-mendix-runtime Knut Michael Haugland en 2026-07-28T12:00:00+02:00 Siemens Mendix Runtime https://knutmichael.com/radar/2026-07-28-siemens-simatic-s7-1500-cpu-1518f-4-pndp-mfp Knut Michael Haugland en 2026-07-28T12:00:00+02:00 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP https://knutmichael.com/radar/2026-07-28-mikrotik-routeros-and-cloud-hosted-router Knut Michael Haugland en 2026-07-28T12:00:00+02:00 MikroTik RouterOS and Cloud Hosted Router https://knutmichael.com/radar/2026-07-28-abb-knx-update-tool Knut Michael Haugland en 2026-07-28T12:00:00+02:00 ABB KNX Update Tool https://knutmichael.com/articles/reading-the-email-was-enough Knut Michael Haugland en 2026-07-28T02:55:00+02:00 Reading the Email Was Enough