https://zerodaydigest.net/hourly1.0 https://zerodaydigest.net/index.htmlhourly1.0 https://zerodaydigest.net/privacy.html0.3 https://zerodaydigest.net/terms.html0.3 https://zerodaydigest.net/article.html?slug=cve-2026-93343-marketking-2172-missing-authorization-via-marketkingadminvendorsajax2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95682-misp-stored-cross-site-scripting-via-unescaped-organization-name-in-admin-email-view2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93342-marketking-2172-missing-authorization-via-marketkingduplicateproduct-ajax2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12718-sqli-in-karel-electronics-karelips-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12718-sqli-in-karel-electronics-karelips2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93341-marketking-2172-missing-authorization-via-marketkingsendrefund-ajax2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95679-misp-unauthenticated-blind-ssrf-via-xml-body-processing2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95675-d-link-dap-1360-614-unauthenticated-rce-via-web-management-interface2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95675-d-link-dap-1360-614-unauthenticated-rce-via-web-management-interface-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95499-josephchuks-php-file-manager-with-code-editor-filemanagerphp-moveuploadedfile-unrestr2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95674-misp-eventscontroller-queryenrichment-allows-querying-unavailable-or-legacy-modules-w2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95671-misp-collections-missing-authorization-check-for-sharing-group-on-put-request-in-coll2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95661-misp-reflected-cross-site-scripting-in-attribute-histogram-via-unescaped-url-supplied2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95273-dgtlmoon-changedetectionio-visualselectordata-flaskapppy-staticcontent-path-traversal2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95619-gcc-libstdc-integer-overflow-in-new-operator2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95659-misp-reflected-xss-via-unvalidated-object-type-in-analystdata-overmind-thread2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95658-misp-csrf-vulnerability-in-workflow-modulestatelessexecution-allows-cross-site-execut2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95271-dgtlmoon-changedetectionio-authentication-hook-flaskapppy-checkauthentication-imprope2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95272-dgtlmoon-changedetectionio-screenshot-flaskapppy-staticcontent-path-traversal2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93616-directory-traversal-and-file-upload-allows-execution-of-arbitrary-script-on-the-manag-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75791-authentication-bypass-vulnerability-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75791-authentication-bypass-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93616-directory-traversal-and-file-upload-allows-execution-of-arbitrary-script-on-the-manag2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95667-misp-installer-log-and-fifo-created-world-readable-exposing-sensitive-credentials2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95666-unbounded-post-id-array-in-the-bulk-reactions-endpoint-allows-denial-of-service2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95665-misp-reflected-cross-site-scripting-in-event-export-confirmation-form-via-unescaped-j2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95396-sfturing-hosporder-public-search-handlers-hospitalcontrollerjava-cross-site-scripting2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=ai-agents-are-rewriting-the-rules-of-lateral-movement2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-cvss-100-velocloud-orchestrator-flaw-actively-exploited-in-certificate-based-setups-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-cvss-100-velocloud-orchestrator-flaw-actively-exploited-in-certificate-based-setups2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-74849-remote-code-execution-vulnerability-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-74849-remote-code-execution-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=dora-year-two-can-your-soc-actually-see-the-attack2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=sharepoint-flaw-initially-listed-as-spoofing-by-microsoft-enables-authenticated-rce2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=sharepoint-flaw-initially-listed-as-spoofing-by-microsoft-enables-authenticated-rce-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95623-improper-ssrf-protection-via-http-redirects-in-tauri-plugin-http2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92882-redact-snmp-community-snmpv3-pass-phrases-and-ipmi-password-in-host-config-rest-api-g2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90990-livestatus-injection-via-monitoring-filter-values2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87119-mpp-tempo-subscription-key-authorization-is-not-bound-to-the-issuing-challenge-allowi-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87119-mpp-tempo-subscription-key-authorization-is-not-bound-to-the-issuing-challenge-allowi2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89420-session-voucher-adding-no-new-funds-is-accepted-without-a-charge-in-mpp-serving-paid2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95270-dgtlmoon-changedetectionio-hash-comparison-flaskapppy-checkpassword-timing-discrepanc2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63279-out-of-bounds-read-in-pict-image-import2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63278-package-urls-can-be-used-to-exfiltrate-arbitrary-ini-file-values-and-environment-vari2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63276-stack-buffer-overflow-in-cff-to-type-1-font-conversion2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63275-stack-buffer-overflow-in-cff-font-hint-handling2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63274-heap-buffer-overflow-in-pdf-import-stream-handling2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63273-heap-buffer-overflow-in-pdf-import-encryption-handling2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63272-heap-buffer-overflow-in-wmf-text-record-import2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=slechts-n-van-225-aan-anthropic-gelinkte-kwetsbaarheden-actief-misbruikt2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25265-creation-of-temporary-file-with-insecure-permissions-in-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25265-creation-of-temporary-file-with-insecure-permissions-in-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25264-uncontrolled-search-path-element-in-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25264-uncontrolled-search-path-element-in-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25262-write-what-where-condition-in-primary-bootloader2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25255-exposed-function-in-qualcomm-package-manager-and-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25255-exposed-function-in-qualcomm-package-manager-and-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25254-improper-authorization-in-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25254-improper-authorization-in-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=malicious-npm-package-indexed-btree-hid-its-loader-in-runtime-code-before-removal2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90882-reflected-arbitrary-origins-with-credentials-allowing-cross-origin-reads-of-authentic-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90882-reflected-arbitrary-origins-with-credentials-allowing-cross-origin-reads-of-authentic2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9231-wp-travel-engine-680-authenticated-contributor-local-file-inclusion-via-template-short2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95511-cups-cups-filters-cups-filters-lpadmin-can-escalate-to-root-via-privileged-serial-bac2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95508-libslirp-libslirp-heap-buffer-overflow-in-dhcpv6tftp-response-builders-on-small-inter2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95511-cups-cups-filters-cups-filters-lpadmin-can-escalate-to-root-via-privileged-serial-bac-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93556-direct-references-to-unsafe-objects-idor-in-tankuam-places-by-kompini-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-68956-ssh-daemon-allocates-unbounded-idle-session-channels-bypassing-maxchannels2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89422-tls-13-client-skips-server-authentication-when-serverhello-carries-an-unsolicited-pre-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93556-direct-references-to-unsafe-objects-idor-in-tankuam-places-by-kompini2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93928-wordpress-taxi-booking-manager-for-woocommerce-plugin-208-broken-authentication-vulne2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65634-superlinear-cpu-denial-of-service-in-erlangotp-asn1-object-identifier-decoder2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65634-superlinear-cpu-denial-of-service-in-erlangotp-asn1-object-identifier-decoder-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89422-tls-13-client-skips-server-authentication-when-serverhello-carries-an-unsolicited-pre2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15095-product-feed-manager-for-woocommerce-6643-authenticated-shop-manager-path-traversal-t2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94117-wordpress-hashbar-wordpress-notification-bar-plugin-203-sql-injection-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92235-wp-ultimate-review-242-authenticated-subscriber-arbitrary-shortcode-execution-via-xss-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92969-husky-144-unauthenticated-local-file-inclusion-via-customtpl-shortcode-attribute-via-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87078-netidnpunycode-versions-from-2302-before-2590-for-perl-leak-the-output-buffer-on-ever2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-74766-netidnpunycode-versions-from-2301-before-2590-for-perl-allow-a-heap-use-after-free-vi2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-1281-bm-content-builder-3171-authenticated-subscriber-arbitrary-file-deletion-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=sidecopy-broadens-india-targeting-to-academia-with-reverserat-spear-phishing2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95503-keycloak-services-keycloak-services-potential-kdc-spoofing-bypass-when-kerberos-passw2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93836-wpc-product-bundles-for-woocommerce-866-unauthenticated-stored-cross-site-scripting-v2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7622-thumbpress-621-missing-authorization-to-authenticated-subscriber-plugin-deactivation2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18345-wp-user-manager-2918-missing-authorization-to-authenticated-subscriber-stripe-account2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9004-wp-crm-system-346-authenticated-contributor-exposure-of-sensitive-information-via-cont2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14487-handily-103-missing-authorization-to-unauthenticated-arbitrary-stripe-payment-setting2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-1280-bm-content-builder-3171-authenticated-subscriber-arbitrary-file-read2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91092-wpforo-forum-315-missing-authorization-to-authenticated-subscriber-guest-post-takeove2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93778-wp-yelp-review-slider-92-unauthenticated-stored-cross-site-scripting-via-yelp-review2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92235-wp-ultimate-review-242-authenticated-subscriber-arbitrary-shortcode-execution-via-xss2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18439-tutor-lms-407-authenticated-custom-insecure-direct-object-reference-to-arbitrary-quiz2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1645-hostel-118-authenticated-administrator-stored-cross-site-scripting-via-customcurrency2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6922-wp-table-builder-221-incorrect-authorization-to-authenticated-subscriber-arbitrary-pos2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-1281-bm-content-builder-3171-authenticated-subscriber-arbitrary-file-deletion2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-4123-rw-elephant-rental-inventory-2313-missing-authorization-to-authenticated-subscriber-ar2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92969-husky-144-unauthenticated-local-file-inclusion-via-customtpl-shortcode-attribute-via2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14486-pixelplay-102-missing-authorization-to-unauthenticated-arbitrary-api-key-deletion-via2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14484-image-buzz-103-missing-authorization-to-unauthenticated-arbitrary-api-key-modificatio2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16778-live-composer-2121-authenticated-contributor-stored-cross-site-scripting-via-dslcmodu2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12995-custom-field-template-278-authenticated-contributor-insecure-direct-object-reference2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93952-security-advisory-0183-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93952-security-advisory-01832026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87082-netidnpunycode-versions-before-2590-for-perl-hang-crash-or-return-a-wrong-label-via-u2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87081-netidnuts46-versions-before-2590-for-perl-allow-cpu-exhaustion-via-quadratic-punycode2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87080-netidnpunycodepp-versions-before-2590-for-perl-decode-a-truncated-label-to-a-name-con2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87079-netidnpunycode-versions-before-2590-for-perl-allow-cpu-exhaustion-via-quadratic-inser2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92438-ninja-forms-3153-unauthenticated-stored-xss-via-paragraph-text-field-in-submissions-a2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=one-hidden-meta-muse-setting-could-let-attackers-turn-the-ai-assistant-into-a-backdoor2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss-into-rce-via-admin-session-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss-into-rce-via-admin-session2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88788-text-styler-111-contributor-stored-xss2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93655-booking-calendar-1183-reflected-cross-site-scripting-via-wpbcautofill-parameter2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12470-cmp-4117-authenticated-editor-privilege-escalation-via-arbitrary-option-update-to-cmp2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85653-contextual-related-posts-441-authenticated-author-stored-cross-site-scripting-via-oth2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19658-give-tributes-231-unauthenticated-php-object-injection-via-givetributesecardnotifyrec-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19658-give-tributes-231-unauthenticated-php-object-injection-via-givetributesecardnotifyrec2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13355-meta-box-aio-3110-and-standalone-plugin-extensions-unauthenticated-privilege-escalati-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13355-meta-box-aio-3110-and-standalone-plugin-extensions-unauthenticated-privilege-escalati2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94493-gigatech-pdv5701-websocket-service-indexhtml-missing-authentication-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94493-gigatech-pdv5701-websocket-service-indexhtml-missing-authentication2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94492-yonyou-u8cloud-openapi-sosaleordersendaudit-sql-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94491-yonyou-ksoa-searchlistjsp-sql-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93711-dancer2-versions-before-220-for-perl-do-not-strip-cr-and-lf-from-response-header-name2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93709-dancer2-versions-before-220-for-perl-serve-a-layout-as-a-page-when-an-equivalent-spel2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93710-dancer2-versions-from-200-before-220-for-perl-dispatch-a-route-that-a-dying-hook-refu2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93712-dancer2-versions-from-210-before-220-for-perl-serve-files-from-outside-publicdir-via2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-76974-information-disclosure-vulnerability-in-sap-fiori-launchpad2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94490-octoprint-command-api-systempy-executesystemcommand-os-command-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94489-octoprint-file-download-api-filespy-validate-path-traversal2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94426-xuxueli-xxl-job-insert-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94425-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140006f0c-privileges-mana-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94425-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140006f0c-privileges-mana2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94626-vllm-through-0290-memory-exhaustion-via-unvalidated-nixl-tpsize-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94623-vllm-through-0290-denial-of-service-via-nixl-multi-prompt-assertion-failure-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94627-vllm-through-0290-gpu-kv-cache-leak-via-mooncake-transfer-id-collision-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94624-vllm-through-0290-denial-of-service-via-unbounded-p2p-kv-offloading-sessions-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94622-vllm-through-0290-denial-of-service-via-incomplete-nixl-kv-transfer-metadata-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88738-jazzware-rt1000-edge-unrestricted-file-upload-remote-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79079-crosswire-xiphos-arbitrary-code-execution-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88756-pagekit-cms-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78847-gray-matter-arbitrary-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78806-matter-project-chip-information-disclosure-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61652-zapros-streaming-decoders-ignored-the-requested-chunk-size-allowing-a-single-compress2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94627-vllm-through-0290-gpu-kv-cache-leak-via-mooncake-transfer-id-collision2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94626-vllm-through-0290-memory-exhaustion-via-unvalidated-nixl-tpsize2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94625-vllm-through-0290-resource-exhaustion-via-ownerless-mooncake-transfer-placeholders2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94624-vllm-through-0290-denial-of-service-via-unbounded-p2p-kv-offloading-sessions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94623-vllm-through-0290-denial-of-service-via-nixl-multi-prompt-assertion-failure2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94622-vllm-through-0290-denial-of-service-via-incomplete-nixl-kv-transfer-metadata2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94540-desktopsms-1110-unauthorized-access-via-local-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65980-chartbrew-sql-injection-via-missing-backslash-escaping-in-clickhouse-variable-substit2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61851-chartbrew-incomplete-read-only-keyword-blocklist-in-ai-runquery-tool2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61852-chartbrew-sql-injection-via-rowlimit-parameter-in-ai-runquery-tool2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61743-chartbrew-dns-rebinding-ssrf-bypass-in-outbound-request-validation2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94536-lamp-cloud-through-5100-unauthorized-information-disclosure-via-anyonevisibleresource2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94535-lamp-cloud-through-5100-unauthorized-notification-deletion2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94534-lamp-cloud-through-5100-unauthorized-profile-modification-via-put-endpoints2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94533-lamp-cloud-through-5100-unauthorized-file-download-via-anyonefile2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94532-lamp-cloud-through-5100-unauthorized-user-profile-access-via-getuserinfobyid2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93340-gladys-assistant-510-password-reset-link-poisoning-via-forgotpassword-endpoint2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61541-zapros-has-an-unbounded-content-encoding-decompression-chain-that-allows-denial-of-se2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59830-discourse-stored-xss-via-unescaped-actor-name-in-post-actions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94572-openstack-octavia-amphora-provider-driver-improper-input-validation-configuration-inj2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94588-proxmox-pmg-api-argument-injection-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94572-openstack-octavia-amphora-provider-driver-improper-input-validation-configuration-inj-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94571-openstack-octavia-amphora-provider-driver-haproxy-configuration-injection-vulnerabili-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94571-openstack-octavia-amphora-provider-driver-haproxy-configuration-injection-vulnerabili2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94424-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140001000-heap-based-over-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94424-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140001000-heap-based-over2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93433-libstoragemgmt-libstoragemgmt-denial-of-service-via-stack-buffer-overflow-in-scsi-vpd2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88409-falkordb-buffer-overflow-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88746-idccms-cross-site-scripting-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79916-maxkb-aws-bedrock-model-credential-injection-leads-to-remote-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77521-maxkb-prompt-injectable-agent-can-lead-to-command-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46649-joplin-sso-auth-code-login-missing-rate-limiting-9-digit-numeric-code-brute-forceable2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55159-luci-app-adblock-fast-delegated-luci-app-adblock-fast-users-can-reach-root-command-ex2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58269-sync-in-server-has-a-complete-2fa-bypass-via-post-apiauthtoken2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55897-luci-app-advanced-reboot-read-acl-exposes-binsh-through-fileexec-allowing-delegated-u2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58269-sync-in-server-has-a-complete-2fa-bypass-via-post-apiauthtoken-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73546-envoy-stored-xss-in-admin-stats-interface-statsformathtml2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73512-envoy-use-after-free-in-quic-on-internal-redirects2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58271-sync-inserver-vulnerable-to-totp-brute-force-via-post-apiappsyncregister2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73550-envoy-http2-discarded-host-header-200-gb-header-copy-oom-in-envoy2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73547-envoy-extauthz-request-path-pseudoheader-dereferenced-wo-null-check2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48521-envoy-http3-connection-pool-selection-null-derefs-in-prodclustermanagerfactoryallocat2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73549-envoy-incomplete-fix-for-cve-2026-26310-copyinternetaddressandport-crashes-on-scoped2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73513-envoy-oghttp2-upstream-trailers-incorrect-handling2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85219-denial-of-service-in-the-opencanary-redis-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49811-dell-command-monitor-incorrect-permission-assignment-elevation-of-privilege-vulnerabi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49811-dell-command-monitor-incorrect-permission-assignment-elevation-of-privilege-vulnerabi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73552-envoy-http-rbac-saferegex-can-fail-open-on-rfc-valid-obs-text-header-values2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73548-envoy-cross-user-response-poisoning-via-a-generic-non-websocket-http-upgrade-on-envoy2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50572-envoy-extauthz-rawhttpclientimpl-onsuccess-0x0-segfault2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55897-luci-app-advanced-reboot-read-acl-exposes-binsh-through-fileexec-allowing-delegated-u-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81469-dell-inventory-collector-client-unquoted-search-path-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55159-luci-app-adblock-fast-delegated-luci-app-adblock-fast-users-can-reach-root-command-ex-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94495-jsherp-through-36-missing-authorization-via-systemconfig2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94501-jsherp-through-36-privilege-escalation-via-userbusiness-crud-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94497-jsherp-through-36-unauthorized-access-via-by-id-endpoints-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94496-jsherp-through-36-privilege-escalation-via-role-management2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94497-jsherp-through-36-unauthorized-access-via-by-id-endpoints2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94501-jsherp-through-36-privilege-escalation-via-userbusiness-crud2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94496-jsherp-through-36-privilege-escalation-via-role-management-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94411-jsherp-36-privilege-escalation-via-updateonevaluebykeyidandtype2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94412-jsherp-through-36-authorization-bypass-via-resetpwd-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94494-jsherp-through-36-tenant-information-disclosure-via-get-tenantinfo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94412-jsherp-through-36-authorization-bypass-via-resetpwd2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94414-jsherp-through-36-missing-authorization-via-updatebtnstr2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94413-jsherp-through-36-password-hash-disclosure-via-userinfo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94403-colorful-igamecenter-ioctl-enesys-sub140001af0-untrusted-pointer-dereference2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58491-warpgate-reflected-xss-in-sso-return-endpoint-via-attacker-controlled-next-parameter2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62182-kubeedge-configupdatejob-updatefields-enables-remote-shell-injection-and-code-executi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48976-homebox-cross-tenant-idor-in-notifier-update-leaks-shoutrrr-credentials-and-allows-we2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48975-homebox-cross-tenant-idor-in-maintenanceentry-update-and-delete-allows-tampering-and2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48826-homebox-cross-group-inventory-wipe-in-homebox-via-global-owner-role-and-x-tenant-head2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61745-inventree-missing-authorization-on-machine-restart-endpoint-allows-any-authenticated2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-69190-graylog-manager-to-owner-privilege-escalation-on-saved-searches-and-dashboards2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55473-homebox-notifier-ssrf-guard-misses-nat64-prefixes-64ff9b96-64ff9b148-generic-url-reac2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48826-homebox-cross-group-inventory-wipe-in-homebox-via-global-owner-role-and-x-tenant-head-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48974-homebox-forced-group-membership-without-consent-in-homebox-addmember-handler2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48975-homebox-cross-tenant-idor-in-maintenanceentry-update-and-delete-allows-tampering-and-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48976-homebox-cross-tenant-idor-in-notifier-update-leaks-shoutrrr-credentials-and-allows-we-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62182-kubeedge-configupdatejob-updatefields-enables-remote-shell-injection-and-code-executi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61612-aborrusockan-mcp-server-has-ssrf-via-dns-name-internal-ip-incomplete-fix-of-cve-20262026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=fake-lastpass-authenticator-installer-abuses-microsoft-signed-driver-to-kill-antivirus-and-edr2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94488-telegram-desktop-cross-site-scripting-vulnerability-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94488-telegram-desktop-cross-site-scripting-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92382-usbredir-usbredir-unbounded-isopacketdesc-index-in-usbredirhostisopacket-leads-to-hea2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93012-emailsendertransportsendmail-versions-before-2602-for-perl-allow-arbitrary-command-ex2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94449-quarkus-smallrye-fault-tolerance-quarkus-smallrye-fault-tolerance-memory-leak-in-appl2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84990-ntopng-missing-authorization-on-system-configuration-backup-download-and-listing-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84990-ntopng-missing-authorization-on-system-configuration-backup-download-and-listing2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83621-ntopng-missing-authorization-check-in-rest-api-allows-non-admin-users-to-tamper-threa2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83621-ntopng-missing-authorization-check-in-rest-api-allows-non-admin-users-to-tamper-threa-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=contagious-interview-campaign-compromises-30000-devices-steals-1071m-in-crypto2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79920-ajenti-privilege-escalation-to-root-via-unauthenticatedunauthorized-plugin-install-ta2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79920-ajenti-privilege-escalation-to-root-via-unauthenticatedunauthorized-plugin-install-ta-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77582-tinyauth-user-enumeration-attack-by-timing-oracle2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77561-tinyauth-unauthenticated-login-attempts-can-trigger-global-login-lockdown-denial-of-s2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77560-tinyauth-forward-auth-per-app-acl-is-matched-case-sensitively-against-the-case-insens-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77560-tinyauth-forward-auth-per-app-acl-is-matched-case-sensitively-against-the-case-insens2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-76898-drawio-unauthenticated-ssrf-via-ipv6-ula-blocklist-bypass-in-embed2js2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63373-drawio-oauth-csrf-via-missing-state-validation-on-self-hosted-deployments-allows-sess2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63416-drawio-path-traversal-in-exportproxyservlet-allows-access-to-arbitrary-backend-endpoi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63334-drawio-ssrf-via-dns-rebinding-in-proxyservlet-bypasses-private-ip-blocklist2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63116-deepstream-patchmulti-action-bypasses-valve-permission-system-allowing-unauthorized-r2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63116-deepstream-patchmulti-action-bypasses-valve-permission-system-allowing-unauthorized-r-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62987-fabio-incomplete-fix-for-cve-2025-48865-operator-configured-trust-headers-clientiptls2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62371-kubeedge-command-injection-in-nodeupgradejob-rce-on-edge-nodes-via-v1alpha2-api2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61674-fluent-bit-remote-stack-buffer-overflow-in-fluent-bit-outforward-secure-forward-pong2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62369-kubeedge-keadm-decompresstargz-path-traversal-enables-arbitrary-file-write-on-windows2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=google-fined-403-million-over-gdpr-violations-tied-to-location-data2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85751-mailu-authentication-bypass-in-header-based-proxy-authentication-via-spoofable-x-forw2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82412-ntopng-remote-code-execution-via-os-command-injection-in-vulnerability-scan-rest-api2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53940-conda-entry-point-path-traversal-in-noarchpython-install-arbitrary-file-write-canonic2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55563-feast-pullrequesttarget-integration-tests-run-untrusted-fork-code-with-production-clo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82412-ntopng-remote-code-execution-via-os-command-injection-in-vulnerability-scan-rest-api-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55563-feast-pullrequesttarget-integration-tests-run-untrusted-fork-code-with-production-clo-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88978-hatchet-durabletask-workerstatus-grpc-resolves-caller-supplied-durable-task-uuids-via2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84298-hatchet-cross-tenant-durable-callback-payload-disclosure-in-hatchet-v1-dispatcher2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61687-hatchet-unauthenticated-oauth-state-csrf-login-csrf-via-empty-state-collision-in-vali2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63342-hatchet-cross-tenant-durable-task-event-log-disclosure-via-missing-authorization-chec2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61681-hatchet-ssrf-via-unsigned-unsubscribeurl-in-sns-unsubscribeconfirmation-handler2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85751-mailu-authentication-bypass-in-header-based-proxy-authentication-via-spoofable-x-forw-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53940-conda-entry-point-path-traversal-in-noarchpython-install-arbitrary-file-write-canonic-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77165-database-file-lock-denial-of-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77166-mattermost-emoji-field-cross-site-scripting-or-ui-redress-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94301-apache-mina-cve-2026-47065-resolveproxyclass-fix-missing-from-20x-and-21x-branches-202026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94301-apache-mina-cve-2026-47065-resolveproxyclass-fix-missing-from-20x-and-21x-branches-20-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94184-fetchmail-fetchmail-stack-based-buffer-overflow-in-ntlm-authentication-fetchmail-sa-2-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94184-fetchmail-fetchmail-stack-based-buffer-overflow-in-ntlm-authentication-fetchmail-sa-22026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93339-ditty-3170-stored-xss-via-layout-tag-wrapper-attribute2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86473-apache-airflow-logout-ignores-a-presented-authorization-bearer-token-leaving-it-revoc2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82355-apache-airflow-session-cookie-silently-overrides-explicit-authorization-bearer-header2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80110-pki-core-dogtag-pki-v2-rest-acl-filters-reverse-lexicographic-tie-break-lets-a-ca-age2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80110-pki-core-dogtag-pki-v2-rest-acl-filters-reverse-lexicographic-tie-break-lets-a-ca-age-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-71543-openbaos-templated-policies-allow-privilege-escalation-via-wildcard-characters2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75158-apache-airflow-assets-events-api-returns-asset-events-for-every-dag-with-no-per-dag-a2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75939-openshiftoc-mirror-release-signature-verification-openpgp-signatureerror-checked-befo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61630-nginx-ignition-has-totp-reuse-during-validity-window2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55870-gocd-is-vulnerable-to-credential-exposure-when-admins-insecurely-configure-material-u2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61628-nginx-ignition-has-unauthenticated-admin-account-creation-via-onboarding-race-conditi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-68919-gocd-has-stored-xss-possible-via-forged-package-material-comments-on-stagejobvsm-page2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61628-nginx-ignition-has-unauthenticated-admin-account-creation-via-onboarding-race-conditi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61629-nginx-ignition-has-parseacceptlanguage-separator-bypass-that-enables-75x-cpu-amplific2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55074-ansible-freebsd-jail-connection-plugin-jail-escape-via-symlink-following-in-putfile-h2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55071-mcp-for-stata-stata-command-injection-via-unsanitized-package-in-adopackageinstall2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cisa-meldt-actief-misbruik-van-drie-kwetsbaarheden-in-linux-kernel2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88807-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71421-uvdesk-core-framework-before-117-privilege-escalation-via-editagent2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=taskstomp-powershell-backdoor-steals-documents-wi-fi-passwords-and-clipboard-data2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94404-misp-csrf-vulnerability-allows-unauthorized-attribute-modification2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88807-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94387-aureus-erp-before-160-stored-xss-via-chatter-field-change-log2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71421-uvdesk-core-framework-before-117-privilege-escalation-via-editagent-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71420-uvdesk-core-framework-before-117-authorization-bypass-via-saved-reply2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71419-uvdesk-core-framework-before-117-stored-xss-via-swiftmailer2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88806-libx11-xkbgetmap-reply-heap-based-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94401-misp-arbitrary-local-file-read-and-ssrf-via-misp-export-upload-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94401-misp-arbitrary-local-file-read-and-ssrf-via-misp-export-upload2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-938842026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94394-misp-objectreferencescontroller-granular-distribution-and-sharing-group-restrictions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94379-misp-http-method-bypass-of-login-security-controls-bruteforce-protection-and-email-ot2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94381-misp-privilege-escalation-read-only-api-key-user-can-regain-full-role-via-updatelogin2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94381-misp-privilege-escalation-read-only-api-key-user-can-regain-full-role-via-updatelogin-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94383-misp-blocklist-workflow-module-arbitrary-script-execution-via-unrestricted-file-exten-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94383-misp-blocklist-workflow-module-arbitrary-script-execution-via-unrestricted-file-exten2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94372-stored-cross-site-scripting-via-unescaped-galaxy-cluster-tag-names-in-misp-default-th2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94373-misp-dom-based-cross-site-scripting-via-innerhtml-in-contextual-menu2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94374-misp-idor-via-client-supplied-report-id-in-module-results-processing-allows-reparenti-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94374-misp-idor-via-client-supplied-report-id-in-module-results-processing-allows-reparenti2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94214-st-engineering-idirect-evolutionvelocity-webserver-evolution-management-service-login2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94216-st-engineering-idirect-evolutionvelocity-webserver-evolution-http-header-webserver-au2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94211-hyve5-leantime-project-dashboard-showbladephp-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84285-os-command-injection-vulnerability-affecting-tuleap-enterprise-edition-from-173-throu-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84285-os-command-injection-vulnerability-affecting-tuleap-enterprise-edition-from-173-throu2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94393-misp-event-report-cross-event-reparenting-via-unscoped-uuid-resolution-in-editreport2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85220-denial-of-service-in-the-thinkst-canary-redis-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94382-beszel-before-0190-insecure-direct-object-reference-via-user-alerts2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94368-noobaa-core-noobaa-core-presigned-put-url-escalation-to-copyobject-via-unsigned-x-amz2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89139-temporal-server-worker-deployment-compute-provider-executes-a-caller-supplied-command2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89139-temporal-server-worker-deployment-compute-provider-executes-a-caller-supplied-command-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87858-temporal-server-completion-callback-source-header-can-direct-attacker-chosen-requests2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65654-temporalioringpop-go-fails-to-enforce-configured-label-limits-on-inbound-membership-g2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65654-temporalioringpop-go-fails-to-enforce-configured-label-limits-on-inbound-membership-g-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65653-temporaliotchannel-go-zero-chunk-call-fragment-causes-process-termination-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65653-temporaliotchannel-go-zero-chunk-call-fragment-causes-process-termination2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65652-temporaliotchannel-go-malformed-checksum-type-causes-process-termination-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65652-temporaliotchannel-go-malformed-checksum-type-causes-process-termination2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65651-temporaliosqlparser-deeply-nested-unary-expressions-can-cause-a-fatal-stack-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65651-temporaliosqlparser-deeply-nested-unary-expressions-can-cause-a-fatal-stack-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16651-temporaliosqlparser-malformed-mysql-version-comments-can-cause-a-panic2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16651-temporaliosqlparser-malformed-mysql-version-comments-can-cause-a-panic-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94210-hyve5-leantime-kanban-board-ticketsphp-getallgrouped-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91867-apache-neethi-remote-policy-fetch-lacks-a-total-timeout-allowing-a-slow-server-to-han2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91866-apache-neethi-crafted-policies-cause-unbounded-work-during-intersection-leading-to-de2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91865-apache-neethi-crafted-policy-references-cause-exponential-expansion-during-normalizat2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91864-apache-neethi-crafted-ws-policy-documents-bypass-elementattribute-limits-causing-memo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91863-apache-neethi-uncontrolled-recursion-while-parsing-crafted-ws-policy-documents-allows2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16652-temporal-server-schedule-exclusion-search-can-cause-excessive-cpu-consumption2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77021-missing-decompression-size-limit-in-agent-receiver-allows-memory-exhaustion-via-push2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92612-eclipse-iceoryx2-staticstring-memory-safety-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92574-cri-o-cri-o-checkpoint-restore-bypasses-destination-security-context2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92574-cri-o-cri-o-checkpoint-restore-bypasses-destination-security-context-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91921-cross-site-scripting-xss-in-1millionbots-ai-chatbot-platform2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94277-stored-cross-site-scripting-in-misp-galaxy-matrix-statistics-via-unescaped-galaxy-nam2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92400-payment-gateway-for-paypal-on-woocommerce-921-unauthenticated-payment-bypass-via-sand2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85113-givewp-4169-unauthenticated-arbitrary-shortcode-execution-via-donor-name2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94151-omega-solution-hrm-os-role-permission-api-permission-missing-authentication2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94150-omega-solution-hrm-os-svg-file-upload-view-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86802-to-do-list-member-14-16-unauthenticated-content-injection-via-import2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94152-omega-solution-fbp-fulfillment-by-people-user-profile-api-user-authorization2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85010-restropress-346-unauthenticated-price-manipulation-via-cart-add-ons2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15801-cri-o-cri-o-insufficient-validation-during-container-checkpoint-restore2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15801-cri-o-cri-o-insufficient-validation-during-container-checkpoint-restore-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-12999-open-vsx-cache-poisoning-via-header-injection-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-12999-open-vsx-cache-poisoning-via-header-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=clickfix-lures-deploy-chainscript-rat-using-polygon-to-rotate-c2-infrastructure2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94149-omega-solution-hrm-os-role-permission-retrieval-endpoint-permission-resource-injectio2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47321-apache-mina-unbounded-decompression-amplification-dos-in-zlibinflate2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94217-keycloak-services-keycloak-services-uma-scope-merge-across-resource-owners-via-resour2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94218-keycloak-services-keycloak-services-2fa-setup-enforcement-bypass-via-authentication-s2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94215-keycloak-services-keycloak-services-cross-realm-client-readwrite-via-request-level-ca2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94213-keycloak-services-keycloak-services-authorization-services-policy-evaluation-endpoint2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94146-biostar-bios-update-utility-ioctl-bsmem64w10sys-sub110bc-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82187-woocommerce-online-product-designer-170-2150-unauthenticated-arbitrary-file-upload2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94145-xuxueli-xxl-job-task-management-jobinfocontrollerjava-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94144-drogonframework-drogon-orm-criteriacc-makecriteria-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90860-canva-harmonyos-app-webview-improper-header-restriction-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94146-biostar-bios-update-utility-ioctl-bsmem64w10sys-sub110bc-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82187-woocommerce-online-product-designer-170-2150-unauthenticated-arbitrary-file-upload-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94148-scadabr-export-project-endpoint-exportprojecthtm-emportdwrcreateexportjson-informatio2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=jade-sleet-linked-to-indian-it-provider-breach-with-flatroof-and-roofdeck-backdoors2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94142-biostar-temperature-monitor-utility-ioctl-bshwmio64w10sys-sub1105c-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94142-biostar-temperature-monitor-utility-ioctl-bshwmio64w10sys-sub1105c-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94139-chengdu-feiyuxing-technology-feiyu-star-router-cookie-sendordercgi-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90839-rejected-reason-this-is-rejected2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94143-drogonframework-drogon-orm-mapper-mapperh-orderby-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94138-chengdu-feiyuxing-technology-feiyu-star-router-sendordercgi-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94185-nvm-alias-resolution-follows-and-discloses-files-outside-nvmdiralias2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94137-hangzhou-shunwang-technology-shzh-irpmjdevicecontrol-shdrvx64sys-sub180004ac0-denial2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94128-biostar-vivid-led-dj-ioctl-bsled64sys-sub1105c-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94128-biostar-vivid-led-dj-ioctl-bsled64sys-sub1105c-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94129-biostar-valkyrie-aurora-ioctl-bsrvsio64sys-sub1105c-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94129-biostar-valkyrie-aurora-ioctl-bsrvsio64sys-sub1105c-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94101-netcore-nbr200v2-routerd-vlanloadformuci-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94110-qcms-content-detail-controllersphp-selftmp-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94100-netcore-nbr200v2-wan-vlan-reconfiguration-routerd-wanconfigsetvlan-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94100-netcore-nbr200v2-wan-vlan-reconfiguration-routerd-wanconfigsetvlan-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94099-netcore-nbr200v2-backup-restore-restorecgi-command-injection-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94098-netcore-nbr200v2-firmware-upgrade-cgi-endpoint-upgrade-command-injection-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94098-netcore-nbr200v2-firmware-upgrade-cgi-endpoint-upgrade-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94099-netcore-nbr200v2-backup-restore-restorecgi-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94103-roocms-frontend-rendering-sitepagephpphp-eval-code-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94102-wuzhicms-login-indexphp-redirect2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94101-netcore-nbr200v2-routerd-vlanloadformuci-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94095-netcore-nbr200v2-traceroute-diagnostic-feature-networktools-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94096-netcore-nbr200v2-lan-ip-configuration-networktools-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94097-netcore-nbr200v2-cgi-diagnostic-endpoint-networktools-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94097-netcore-nbr200v2-cgi-diagnostic-endpoint-networktools-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94096-netcore-nbr200v2-lan-ip-configuration-networktools-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94094-openclaw-canvas-host-route-serverts-createcanvashosthandler-denial-of-service2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94093-dlr-rm-stable-baselines3-saveutilpy-vecnormalizeload-deserialization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94092-dmlc-dgl-utilspy-readtorchdata-deserialization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94091-piskvorky-gensim-model-loader-utilspy-load-deserialization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94095-netcore-nbr200v2-traceroute-diagnostic-feature-networktools-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94090-justicerage-manalyze-pe-parser-pecpp-parsedebug-integer-underflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94089-d-link-dir-868l-authentication-webfaauthenticationcgi-strcpy-stack-based-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94051-0717376-coworkbench-pdf-tools-mcp-serverpy-controlflownode-server-side-request-forger2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94089-d-link-dir-868l-authentication-webfaauthenticationcgi-strcpy-stack-based-overflow-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94050-d-link-dir-x1860z-ubus-json-rpc-interface-routerdgetrandkey-information-disclosure2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94049-06ketan-slideshot-rendererts-renderslides-path-traversal2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94045-newbee-ltd-newbee-mall-goods-save-endpoint-uploadcontrollerjava-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94046-0215andrewfeng-ace-mcp-mcp-tool-getfilesnippetts-getfilesnippet-path-traversal2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94043-free5gc-gmm-handlergo-race-condition2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94044-03-lovepreetsingh-mcp-routets-createfile-path-traversal2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94048-codeastro-qr-code-attendance-management-system-usercontrollerphp-save-privileges-mana2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94047-samanhappy-mcphub-template-import-endpoint-templateservicets-importtemplate-privilege2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88857-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88855-joomla-extension-ordasoftcom-authenticated-privileged-sql-injection-in-ordasoft-jooml2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88856-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88854-joomla-extension-ordasoftcom-unauthenticated-sql-injection-in-ordasoft-joomla-gallery2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88857-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88854-joomla-extension-ordasoftcom-unauthenticated-sql-injection-in-ordasoft-joomla-gallery-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88855-joomla-extension-ordasoftcom-unauthenticated-sql-injection-in-ordasoft-joomla-gallery2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88856-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94042-adithyayelloju-restaurant-management-system-addtablephp-mysqliquery-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94040-vas3k-taxhacker-actionsts-testllmprovideraction-server-side-request-forgery2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94038-noncegeek-dim-sum-app-deno-backend-maintsx-textsearchv2handler-server-side-request-fo2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94039-vas3k-taxhacker-invoice-pdf-renderer-actionsts-generateinvoicepdf-server-side-request2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94037-00kisumi00-mcp-file-analyzer-analyzecsvdata-mcp-tool-mainpy-controlflownode-path-trav2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94041-adithyayelloju-restaurant-management-system-addmenuphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94036-d-link-dir-x1860dir-x1860z-routerd-ubus-access-control2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94036-d-link-dir-x1860dir-x1860z-routerd-ubus-access-control-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94033-sourcecodester-drug-recommendation-system-user-management-adduser-cross-site-scriptin2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94034-sourcecodester-drug-recommendation-system-password-change-changepassword-cross-site-s2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94032-itsourcecode-leave-management-system-indexphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94035-sourcecodester-drug-recommendation-system-indexphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94031-0-gaurav-0-nexus-mcp-nexusreauth-mcp-tool-browserts-childprocessexec-command-injectio2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94030-serenityos-libgfx-bmploadercpp-decodebmppixeldata-integer-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94015-sourcecodester-drug-recommendation-system-edituserphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94028-mealie-recipes-mealie-recipe-action-trigger-controllergrouprecipeactionspy-payloadmod2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94016-sourcecodester-drug-recommendation-system-addsymptom-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92254-watchdog-antivirus-kernel-driver-arbitrary-file-deletion-via-unauthenticated-ioctl2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92252-incorrect-default-permissions-in-watchdog-anti-virus-installation-directory2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92253-arbitrary-file-write-via-directory-junction-in-watchdog-anti-virus-quarantine-restora2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90817-redcap-remote-code-execution-vulnerability-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90817-redcap-remote-code-execution-vulnerability2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94109-openequella-before-202610-remote-code-execution-via-freemarker-template-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94003-comfast-cf-n1-s-web-management-mbox-config-getcsspathfromuri-stack-based-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94113-frappe-erpnext-before-151210-and-16340-missing-authorization-in-timesheet-endpoints2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94111-tencent-browserskill-through-030-origin-validation-error-in-local-websocket-daemon2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94112-mayswind-ezbookkeeping-before-200-totp-replay-attack2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94004-dedecms-mytagjsphp-code-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94109-openequella-before-202610-remote-code-execution-via-freemarker-template-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94003-comfast-cf-n1-s-web-management-mbox-config-getcsspathfromuri-stack-based-overflow-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93979-code-projects-internship-management-system-loginphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93980-code-projects-internship-management-system-admin-login-form-loginphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93978-code-projects-internship-management-system-loginphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93977-code-projects-assessment-management-add-single-markphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93997-sourcecodester-drug-recommendation-system-editsymptomphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94108-getid3-through-1926-xml-external-entity-injection-via-xml2array2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94108-getid3-through-1926-xml-external-entity-injection-via-xml2array-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94106-getid3-before-1926-os-command-injection-via-unescaped-filenames2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94107-nivocart-through-240-predictable-administrator-password-reset-token2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94107-nivocart-through-240-predictable-administrator-password-reset-token-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94106-getid3-before-1926-os-command-injection-via-unescaped-filenames-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94105-nivocart-through-240-destructive-configuration-write-via-the-password-reset-controlle2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94104-nivocart-through-240-arbitrary-file-upload-rce-via-filemanager-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94104-nivocart-through-240-arbitrary-file-upload-rce-via-filemanager2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93976-code-projects-assessment-management-add-userphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93975-code-projects-assessment-management-user-editing-edit-userphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93973-sourcecodester-online-reviewer-management-system-btnfunctionsphp-remove-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93974-sourcecodester-online-reviewer-management-system-btnfunctionsphp-remove-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86555-hardcoded-key-vulnerability-in-zte-smartlife-app2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93970-aiyiyi121-sxdevops-settings-settingspy-hard-coded-credentials2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86554-email-enumeration-and-account-id-leakage-vulnerabilities-in-zte-smartlife-app2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93972-sourcecodester-online-reviewer-management-system-btnfunctionsphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93971-aiyiyi121-sxdevops-settingspy-information-disclosure2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93969-aiyiyi121-sxdevops-servicespy-ensuredefaultsuperuser-hard-coded-credentials2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93968-aiyiyi121-sxdevops-userserializer-serializerspy-update-privileges-management2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92422-meow-gallery-555-unauthenticated-arbitrary-shortcode-execution-via-loadgallerycollect2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93966-aiyiyi121-sxdevops-taskruncommand-hosttaskspy-paramikosshclientexeccommand-command-in2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92965-tiktok-120-141-unauthenticated-oauth-code-redemption2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92540-import-and-export-users-and-customers-252-custom-role-privilege-escalation-to-adminis2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92541-import-and-export-users-and-customers-252-custom-role-privilege-escalation-to-adminis2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92423-meow-gallery-555-author-draft-and-private-post-disclosure-via-fetchposts2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93967-aiyiyi121-sxdevops-command-servicespy-generatehosttask-command-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92410-sign-up-sheets-240-arbitrary-sign-up-deletion-via-csrf2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84223-kirki-600-630-author-stored-xss-via-unsanitized-svg-upload2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87068-forminator-forms-15721-authenticated-privilege-escalation-via-quiz-lead-form-import2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82842-saml-single-sign-on-600-unauthenticated-privilege-escalation-via-account-matching-12026-09-20weekly0.8