https://zerodaydigest.net/hourly1.0 https://zerodaydigest.net/index.htmlhourly1.0 https://zerodaydigest.net/privacy.html0.3 https://zerodaydigest.net/terms.html0.3 https://zerodaydigest.net/article.html?slug=cve-2026-100311-mathurvishal-cloudclassroom-php-project-faculty-video-management-managevideos2php-cr2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96531-optimole-400-4212-author-stored-xss-via-video-player-block2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96524-mcp-server-for-wordpress-182-administrator-account-creation-via-csrf2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96526-mcp-server-for-wordpress-182-contributor-arbitrary-post-title-disclosure-via-workflow2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96525-mcp-server-for-wordpress-182-contributor-workflow-modification-and-deletion-via-missi2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92411-wp-delicious-1108-contributor-stored-xss-via-recipe-block-tag-name2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96533-testimonials-widget-404-unauthenticated-ssrf-via-featured-image-url2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96532-testimonials-widget-404-unauthenticated-arbitrary-post-update2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18143-request-a-quote-for-woocommerce-292-unauthenticated-arbitrary-file-upload-via-ajax-po-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85081-multiple-elfinder-plugins-dom-based-xss-via-postmessage-origin-bypass2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19708-file-manager-722-804-unauthenticated-database-backup-disclosure2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84096-wp-review-slider-pro-12712-subscriber-stored-xss-via-review-form-fields2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84097-wp-review-slider-pro-12712-subscriber-sqli-via-stored-template-filter2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18143-request-a-quote-for-woocommerce-292-unauthenticated-arbitrary-file-upload-via-ajax-po2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89237-bluff-post-111-unauthenticated-sqli-via-tablename-and-columnname-parameters2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84095-wp-review-slider-pro-12712-subscriber-stored-xss-via-review-import2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16591-wp-directory-kit-158-listing-admin-stored-xss-via-category-and-location-title-and-ico2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11871-team-showcase-supreme-92-unauthenticated-sensitive-data-disclosure-via-wpm6310teammem2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100598-openclaw-before-202671-approval-binding-logic-error2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100599-openclaw-202651-before-202671-remote-code-execution-via-googlemeetchrome-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100596-openclaw-before-202671-authorization-bypass-via-mcp-configuration-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100597-openclaw-before-202671-path-traversal-via-filesystem-race-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100595-openclaw-before-202671-authorization-bypass-via-diagnostics2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15273-automaticcss-400-unauthenticated-stored-cross-site-scripting-via-requesturi2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100590-openclaw-before-202671-authorization-bypass-via-voice-set2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100589-openclaw-before-202671-sandbox-bypass-via-browser-node-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100594-openclaw-before-202671-authorization-bypass-via-trajectory-export2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100593-openclaw-before-202671-authentication-bypass-via-activation2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100592-openclaw-before-202671-authentication-bypass-via-memory-dreaming2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100591-openclaw-before-202671-authentication-bypass-via-active-memory2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100584-openclaw-before-202671-allowlist-bypass-via-workspace-shadows2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100583-openclaw-discord-before-202671-authorization-bypass2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100582-openclaw-msteams-before-202681-channel-read-allowlist-bypass2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100587-openclaw-before-202671-authorization-bypass-via-codex-install-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100588-openclaw-before-202671-authentication-bypass-via-nodeinvoke-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100585-openclaw-before-202671-authentication-bypass-via-mcp-channel-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100586-openclaw-codex-before-202671-authorization-bypass-via-bind-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100579-openclaw-before-202671-authentication-bypass-via-spoofed-requester2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100581-openclaw-ios-before-2026811-credential-storage-via-share-extension2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100580-openclaw-before-202671-remote-code-execution-via-cron-tool-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100578-openclaw-before-202671-authorization-bypass-via-chatsend2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100577-openclaw-before-202681-server-side-request-forgery-via-video-asset2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100576-openclaw-before-202681-ssrf-via-browser-wait-predicates2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100599-openclaw-202651-before-202671-remote-code-execution-via-googlemeetchrome2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100597-openclaw-before-202671-path-traversal-via-filesystem-race2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100596-openclaw-before-202671-authorization-bypass-via-mcp-configuration2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100589-openclaw-before-202671-sandbox-bypass-via-browser-node2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100588-openclaw-before-202671-authentication-bypass-via-nodeinvoke2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100587-openclaw-before-202671-authorization-bypass-via-codex-install2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100586-openclaw-codex-before-202671-authorization-bypass-via-bind2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100585-openclaw-before-202671-authentication-bypass-via-mcp-channel2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100580-openclaw-before-202671-remote-code-execution-via-cron-tool2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100575-openclaw-slack-before-202681-authentication-bypass-via-group-dm2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100574-openclaw-before-202681-ssrf-via-trusted-host-dns2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100570-openclaw-before-202681-remote-code-execution-via-cloudsdkpythonargs2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100568-openclaw-before-202681-unauthorized-command-job-access2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100567-openclaw-before-202681-dns-rebinding-via-cdp-hostname2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100561-openclaw-before-202681-authentication-bypass-via-exec-wrapper2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100559-openclaw-before-202681-command-injection-via-escaped-newlines2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100558-openclaw-before-202681-resource-exhaustion-via-websocket-upgrade2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100557-openclaw-before-202681-authorization-bypass-via-skill-tool-dispatch2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100552-openclaw-before-202681-policy-bypass-via-native-tools2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100551-openclaw-ios-control-ui-tls-pin-enforcement-bypass2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100544-openclaw-voice-call-before-202681-authorization-bypass2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100532-openclaw-whatsapp-before-202681-authentication-bypass2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100530-openclaw-before-202681-exec-approval-directory-binding2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100524-cotonti-through-100-cross-site-request-forgery-via-extensions-manager2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100521-cotonti-through-100-reflected-xss-via-search-highlight-parameter2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100505-ghidra-112-through-1214-heap-out-of-bounds-read-via-stringmanager2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100520-laranode-before-121-path-traversal-in-file-manager-upload-endpoint2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100504-ghidra-through-1214-stack-based-buffer-overflow-via-leftshift1282026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100523-cotonti-through-100-open-redirect-via-messagephp-redirect-parameter2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100522-cotonti-through-100-reflected-xss-via-messagephp-lng-parameter2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100520-laranode-before-121-path-traversal-in-file-manager-upload-endpoint-12026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100503-ghidra-through-1214-heap-use-after-free-in-decompiler2026-09-26weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96795-horilla-authenticated-rce-in-horilla-list-view-export-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96795-horilla-authenticated-rce-in-horilla-list-view-export2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86066-horilla-attendance-approval-endpoint-is-vulnerable-to-cross-site-request-forgery2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57449-actual-sync-server-cors-proxy-github-api-allowlist-prefix-bypass-leaks-private-reposi2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9655-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9652-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92842-oob-read-info-leak-in-convert-stream-filters-when-line-break-chars-contains-nul2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91768-ipv6-acl-bypass-in-fastcgi-listenallowedclients-due-to-partial-address-comparison-mem2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7800-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7799-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-71483-horilla-reflected-cross-site-scripting-xss-in-employee-filter-view2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53973-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53971-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49118-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49117-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53972-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100501-flame-through-240-brute-force-attack-via-login-endpoint2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100382-unauthenticated-remote-code-execution-through-wikitext-in-externaldata2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100502-flame-through-240-admin-token-insufficient-session-expiration2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100501-flame-through-240-brute-force-attack-via-login-endpoint-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100418-flame-through-240-information-exposure-via-get-apiconfig2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100419-gitoxide-gix-fs-before-0230-worktree-escape-via-symlink2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-71483-horilla-reflected-cross-site-scripting-xss-in-employee-filter-view-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63432-horilla-server-side-template-injection-ssti-in-mail-preview-endpoints-allows-authenti2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63431-horilla-missing-authorization-on-payroll-component-views-exposes-employee-salary-stru2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88003-invoiceplane-failure-to-revoke-administrative-privileges-after-role-downgrade2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452412026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452402026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452392026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452382026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452372026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452362026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452352026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-452342026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96879-checked-by-label-in-page-history-should-not-be-shown-if-the-underlying-review-log-ent2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9313-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91767-heap-buffer-overflow-in-phpopensslmatcheswildcardname-on-crafted-server-cert-wildcard2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91765-soap-unbounded-recursion-in-server-side-cleanupxmlnode2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91769-tls-hostname-verification-falls-back-to-cn-after-san-mismatch2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91766-cross-origin-credential-leak-in-http-stream-wrapper-redirects2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57443-scbe-aethermoore-unauthenticated-aetherbrowser-ops-api-exposes-operator-email-digests2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6103-phar-tar-phartarnumber-integer-overflow-archive-entry-injection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57864-rejected-reason-this-cve-id-has-been-rejected-or2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100391-mediaflow-proxy-through-249-server-side-request-forgery-via-incomplete-validation2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100389-gestsup-before-3261-remote-code-execution-via-imap-attachment2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100390-zoraxy-323-through-334-client-ip-spoofing-via-x-forwarded-for-ipv62026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100387-pgpointcloud-through-125-heap-out-of-bounds-read-via-wkb-deserialization2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100369-cliinvoke-argument-injection-in-extensibility-runner-factory2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100368-cliinvokespecializations-command-injection-in-powershell-and-cmd-shell-wrappers-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93682-out-of-bounds-read-in-the-http-stream-wrapper-when-following-a-redirect-with-an-empty2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-578612026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-539902026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100368-cliinvokespecializations-command-injection-in-powershell-and-cmd-shell-wrappers2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96878-cargo-exhibit-field-alias-allows-stored-xss2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96877-reflected-xss-through-cargo-drilldown-full-text-search2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100208-microsoft-office-outlook-remote-code-execution-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100373-openmetadata-through-202-ssrf-via-webhook-url-validation-bypass2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100372-clipbucket-v5-before-553-197-path-traversal-via-templateeditorphp2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100372-clipbucket-v5-before-553-197-path-traversal-via-templateeditorphp-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100310-gnu-libextractor-before-116-privilege-escalation-via-libextractorprefix2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96876-anonymous-reflected-xss-in-cargoexport-invalid-alias-errors2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96875-reflected-xss-in-cargo-drilldown-hierarchy-filters2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97897-krayin-laravel-crm-tinymce-media-upload-sanitizerphp-cross-site-scripting2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97063-x-springboot-through-60-authentication-bypass-via-login-code2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97063-x-springboot-through-60-authentication-bypass-via-login-code-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97064-x-springboot-through-60-authentication-bypass-via-static-master-code-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97064-x-springboot-through-60-authentication-bypass-via-static-master-code2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97895-krayin-laravel-crm-user-management-usercontrollerphp-privileges-management2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97060-x-springboot-through-60-authorization-bypass-via-user-management-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97060-x-springboot-through-60-authorization-bypass-via-user-management2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97896-krayin-laravel-crm-upload-functionality-configurationformphp-rules-cross-site-scripti2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84465-zammad-smime-signature-verification-allows-forged-sender-impersonation2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84464-zammad-idor-in-external-data-source-rendering-exposes-ticket-user-group-and-organizat2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84458-zammad-account-takeover-via-unverified-email-matching-during-sso-auto-link2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84458-zammad-account-takeover-via-unverified-email-matching-during-sso-auto-link-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84461-zammad-missing-rate-limiting-allows-password-brute-forcing-during-two-factor-login2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84463-zammad-stored-html-injection-in-knowledge-base-video-widget-enables-forced-session-sw2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84460-zammad-missing-authorization-in-tagscontrollerlist-allows-cross-object-tag-enumeratio2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63216-zammad-stored-xss-via-unescaped-option-labels-in-the-object-attribute-options-context2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55214-glpi-stored-xss-in-suppliers2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48482-glpi-rce-via-form-import2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47679-glpi-arbitrary-file-deletion2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84462-zammad-ai-agent-template-sanitizer-bypass-leads-to-remote-code-execution-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61525-zammad-arbitrary-file-deletion-via-unvalidated-session-identifier-in-long-polling-con2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56731-zammad-cross-site-scripting-in-ticket-notifications2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56733-zammad-incorrect-authorization-and-improper-privilege-management2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56725-zammad-denial-of-service-via-otrs-import-controller2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97886-mathurvishal-cloudclassroom-php-project-managevideos2php-sql-injection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91841-networkmanager-vpnc-networkmanager-vpnc-incomplete-fix-for-cve-2018-10900-allows-root2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91840-networkmanager-vpnc-networkmanager-vpnc-local-privilege-escalation-to-root-via-newlin2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91839-networkmanager-fortisslvpn-networkmanager-fortisslvpn-local-privilege-escalation-to-r2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91838-networkmanager-sstp-networkmanager-sstp-local-privilege-escalation-to-root-via-shell2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97885-mathurvishal-cloudclassroom-php-project-updatefacultyphp-sql-injection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97884-mathurvishal-cloudclassroom-php-project-student-update-functionality-updatestudentphp2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84462-zammad-ai-agent-template-sanitizer-bypass-leads-to-remote-code-execution2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65828-zammad-pending-upload-deletion-bypass-via-legacy-attachment-endpoint2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97879-zhistaredu-startraining-api-docs-endpoint-securityconfigjava-missing-authentication2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97878-zhistaredu-startraining-druid-console-indexhtml-anonymous-missing-authentication2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97877-zhistaredu-startraining-jwt-token-applicationyml-userloginservicecreatetoken-hard-cod2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97871-zhonglun-cloudpos-jsbridge-jsbridgecs-openlocalbrowser-code-injection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95835-missing-ownership-check-on-the-shared-memory-object-named-by-the-kitty-askpass-escape2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95834-use-after-free-in-the-kitty-drag-and-drop-protocol-when-a-drag-source-item-is-aborted2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93363-payload-cms-storage-vercel-blob-adapter-improper-access-control-on-upload-route2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94445-malicious-user-input-may-lead-to-rce-in-golangorgxplayground-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94445-malicious-user-input-may-lead-to-rce-in-golangorgxplayground2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93365-bludit-cms-3220-missing-authorization-via-content-get-list-ajax-endpoint2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93364-bludit-cms-3220-mass-assignment-privilege-escalation-via-pagesedit2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89032-berriai-litellm-11010-rc1-tenant-isolation-bypass-via-semantic-cache-layer-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89032-berriai-litellm-11010-rc1-tenant-isolation-bypass-via-semantic-cache-layer2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91837-networkmanager-iodine-networkmanager-iodine-local-privilege-escalation-to-root-via-na2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67421-rabbitmq-stored-html-injection-in-rabbitmq-management-oauth-error-handling2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80432-missing-authorization-in-the-kitty-drag-and-drop-protocol-allows-a-client-to-obtain-d2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67420-rabbitmq-oauth-credential-refresh-retains-revoked-runtime-tags2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67410-rabbitmq-oauth2-client-secret-exposed-via-unauthenticated-javascript-endpoint2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67419-rabbitmq-consecutive-topic-wildcards-cause-combinatorial-routing-work2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67409-rabbitmq-jwks-fetch-ignores-http-response-status-code-signing-key-destruction-causes2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100248-rattadan-cosmowarp-improper-authorization-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92161-friendsofflarum-oauth-unauthenticated-account-takeover-via-unverified-email-trust-in-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67236-rabbitmq-plaintext-usernamepassword-stored-in-an-insecure-cookie-after-successful-pos-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62262-piwigo-unauthenticated-sql-injection-in-pwgimagesfilteredsearchcreate-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44642-piwigo-sql-injection-in-upgrade-authentication-allows-unauthenticated-upgrade-authori-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42322-piwigo-authenticated-rce-via-file-upload-in-logo-upload-feature-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-39353-invoiceplane-remote-code-execution-via-writable-templates-directory-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-67236-rabbitmq-plaintext-usernamepassword-stored-in-an-insecure-cookie-after-successful-pos2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92161-friendsofflarum-oauth-unauthenticated-account-takeover-via-unverified-email-trust-in2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42322-piwigo-authenticated-rce-via-file-upload-in-logo-upload-feature2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42324-piwigo-second-order-sql-injection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44642-piwigo-sql-injection-in-upgrade-authentication-allows-unauthenticated-upgrade-authori2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62262-piwigo-unauthenticated-sql-injection-in-pwgimagesfilteredsearchcreate2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42323-piwigo-sql-injection-in-batch-manager2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97469-postgresql-anonymizer-restricted-functions-are-reachable-through-a-sublink2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49850-invoiceplane-missing-csrf-protection-on-state-changing-delete-actions2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50547-invoiceplane-permits-local-file-inclusion-through-the-e-invoice-xml-configuration-ide2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33639-invoiceplane-permits-ddl-injection-through-taxratedecimalplaces2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100230-input-leap-directory-traversal-and-remote-code-execution2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-39353-invoiceplane-remote-code-execution-via-writable-templates-directory2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85293-invoiceplane-stored-cross-site-scripting-xss-via-client-email-in-invoice-and-quote-ma2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85291-invoiceplane-idor-horizontal-privilege-escalation-via-password-change-without-authori2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85289-invoiceplane-missing-csrf-token-validation-on-multiple-delete-endpoints2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85292-invoiceplane-loose-type-comparison-in-core-authentication-check-defense-in-depth2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85274-invoiceplane-recurring-invoice-state-change-via-get-request-without-csrf-protection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85290-invoiceplane-log-injection-via-unsanitized-user-input-in-cron-key-error-logging2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-39372-invoiceplane-sensitive-information-disclosure-via-unstripped-exif-metadata-in-attachm2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54790-invoiceplane-second-order-sql-injection-through-the-unvalidated-customfieldtable-fiel2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97866-zhonglun-cloudpos-automatic-update-programcs-channel-accessible2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96812-host-root-sandbox-escape-in-gvisor-via-character-device-passthrough-and-cuse2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96812-host-root-sandbox-escape-in-gvisor-via-character-device-passthrough-and-cuse-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93030-ftm-xml-external-entity-injection-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93306-this-power-system-update-is-being-released-to-address2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=compromised-github-actions-came-back-online-and-resumed-executing-mini-shai-hulud-malware2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100075-rdmasrpt-fix-srptallocrwctxs-unwind-counters2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84884-ibm-guardium-data-protection-is-affected-by-multiple-vulnerabilities2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84893-ibm-guardium-data-protection-is-affected-by-multiple-vulnerabilities2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93647-zimbra-collaboration-suite-classic-web-client-stored-cross-site-scripting-via-crafted-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93647-zimbra-collaboration-suite-classic-web-client-stored-cross-site-scripting-via-crafted2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93643-zimbra-collaboration-suite-onlyoffice-integration-path-traversal-leading-to-remote-co2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93643-zimbra-collaboration-suite-onlyoffice-integration-path-traversal-leading-to-remote-co-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85029-ibm-guardium-data-protection-is-affected-by-multiple-vulnerabilities2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93642-zimbra-collaboration-suite-modern-web-client-stored-cross-site-scripting-via-forged-s2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93642-zimbra-collaboration-suite-modern-web-client-stored-cross-site-scripting-via-forged-s-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93641-zimbra-collaboration-suite-classic-web-client-stored-cross-site-scripting-via-forged-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93641-zimbra-collaboration-suite-classic-web-client-stored-cross-site-scripting-via-forged2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85542-ibm-guardium-data-protection-is-affected-by-multiple-vulnerabilities2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85542-ibm-guardium-data-protection-is-affected-by-multiple-vulnerabilities-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100190-stored-cross-site-scripting-xss-via-crawler-capture-import-in-ail-framework-showdoma2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97222-gnumeric-gnumeric-heap-use-after-free-when-opening-a-malformed-workbook2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85750-piwigo-arbitrary-file-read-and-remote-code-execution-via-insecure-image-processing2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100187-ail-framework-onion-module-non-onion-url-accepted-as-crawler-task-due-to-bypassed-do2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93834-qemu-kvm-9pfs-use-after-free-race-in-tlcreatetwalk-allows-vm-guest-escape-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93834-qemu-kvm-9pfs-use-after-free-race-in-tlcreatetwalk-allows-vm-guest-escape2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100177-ail-framework-crawler-missing-cookiejar-authorization-check-allows-cross-organizatio2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97865-open-web-analytics-remote-event-queue-endpoint-queuephp-loadfromarray-deserialization2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100176-stored-cross-site-scripting-xss-in-ail-framework-username-timeline-tooltip2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100176-stored-cross-site-scripting-xss-in-ail-framework-username-timeline-tooltip-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80431-out-of-bounds-write-in-the-kitty-text-sizing-protocol-allows-termination-of-the-termi2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100174-stored-cross-site-scripting-xss-in-ail-framework-tag-selector-via-unescaped-tag-name2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=pamstealer-macos-malware-adds-live-c2-payload-decryption-and-multi-layer-persistence2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95832-reflected-unknown-field-names-in-the-kitty-colour-control-escape-code-allow-command-e-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95832-reflected-unknown-field-names-in-the-kitty-colour-control-escape-code-allow-command-e2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79153-seclore-filesecure-desktop-client-improper-access-control-privilege-escalation2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88420-apsl-puput-reflected-cross-site-scripting2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78902-netgate-pfsense-pfblockerng-cross-site-scripting-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88421-apsl-puput-improper-access-control2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-51773-openstack-glance-store-vmware-datastore-driver-server-side-request-forgery-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-51773-openstack-glance-store-vmware-datastore-driver-server-side-request-forgery2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52622-wellav-emergency-broadcast-terminal-information-disclosure-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-51457-d-link-dap-2610-authenticated-command-injection2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-100172-stored-xss-in-ail-framework-extracted-match-popovers-via-unescaped-dynamic-values-in2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-976222026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=the-soc-doesnt-need-to-start-over-with-every-alert2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98158-pppasync-drop-the-errored-frame-instead-of-resetting-its-headroom2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98156-drmvirtio-use-the-dma-api-for-resource-backing-on-xen2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98155-accelqaic-address-potential-out-of-bounds-read-in-respworker2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98159-wifi-mt76-mt7921-validate-clc-firmware-records2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98154-nvme-rdma-fix-eio-cleanup-order-in-queuerq2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98157-edacdevicesysfs-use-kstrtouint-for-pollmsec-to-prevent-truncation2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98150-bpf-fix-bpffcpu-validation-for-sparse-cpu-ids2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98152-nvmet-rdma-fix-queue-leak-when-connect-backlog-is-exceeded2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98153-nvme-fix-racy-access-to-fdp-placement-id-array2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98151-bpf-fix-reg-invariants-violation-on-speculative-pointer-arithmetic2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98148-drmgud-validate-gudrotation0-is-present-in-supported-rotations2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98147-printk-dont-warn-on-kthreadrun-failure2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98149-bpf-fix-percpu-map-update-indexing-with-sparse-cpu-ids2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98146-accelamdxdna-remove-countedby-from-struct-amdxdnacmdchain2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98145-accelamdxdna-reject-a-command-chain-that-carries-no-commands2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98136-ntfs-bound-attrdef-table-walk-to-the-loaded-table-size2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98138-ntfs-do-not-mark-the-volume-clean-in-syncfs-when-errors-were-recorded2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98142-drmcirrus-qemu-validate-bar0-size-during-probe2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98141-ntfs-propagate-reparse-index-insertion-failure2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98139-ntfs-only-count-successfully-cleared-runs-when-freeing-clusters2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98140-ntfs-fix-kmaplocal-leak-in-writemftrecordnolock-error-paths2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98143-accel-ethosu-dont-read-the-u65-rounding-mode-as-a-storage-mode2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98144-accelamdxdna-put-the-chained-bo-when-its-mapping-fails2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98137-ntfs-treat-any-nonzero-dio-zero-range-return-as-an-error2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98130-sctp-fix-a-toctou-race-in-sctpcmdtimerstart2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98115-ksmbd-safely-drain-sessions-during-logoff2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98070-netrds-acquire-rdsinxmit-in-rdstcpresetcallbacks2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-98069-netrds-acquire-the-fastpath-locks-in-rdsconnshutdown2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97957-net-hinic-fix-mailbox-segment-buffer-overflow2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97875-dns-rebinding-vulnerability-in-rojo-serve-http-api2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97573-bnxten-handle-buffer-allocation-failure-in-bnxtrxringreset2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97570-bnxten-bound-sw-tpa-ids-to-prevent-crashes2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97555-smb-client-fix-heap-overflow-in-dacl-ownergroup-rewrite2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97527-scsi-qla2xxx-serialize-nvme-unsol-ctx-list-with-a-per-fcport-lock2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97525-x86mmpat-allocate-split-page-tables-as-kernel-page-tables2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97528-scsi-qla2xxx-unlink-nvme-unsol-ctx-before-freeing-on-ls-reject-error2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=bitget-says-suspected-north-korean-hackers-stole-3516m-after-backend-compromise2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=roundcube-pre-auth-sql-injection-flaw-actively-exploited-in-the-wild2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=roundcube-pre-auth-sql-injection-flaw-actively-exploited-in-the-wild-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97898-broken-authorization-in-akia-keyless-entry-lets-an-authenticated-guest-unlock-other-r2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97898-broken-authorization-in-akia-keyless-entry-lets-an-authenticated-guest-unlock-other-r-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92106-lazyhtml-serializes-svg-and-mathml-style-and-script-text-unescaped-allowing-mutation2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97863-misp-modules-shell-command-injection-in-misp-ciscofiresightmanageraclruleexport-modul2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88848-masterstudy-lms-19-3750-subscriber-membership-plan-quota-and-category-restriction-byp2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92560-apache-qpid-broker-j-type-sizecount-handling-can-lead-to-excessive-allocation-pre-aut2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86837-bookly-283-unauthenticated-customer-pii-update-via-verification-bypass2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92564-apache-qpid-broker-j-unbounded-type-nesting-can-lead-to-stack-overflow-pre-authentica2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92550-apache-qpid-broker-j-type-sizecount-handling-can-lead-to-excessive-allocation-pre-aut2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92573-apache-qpid-broker-j-uncontrolled-resource-consumption-during-amqp-delivery-decompres2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80514-wpforo-forum-300-315-unauthenticated-ai-credit-exhaustion-via-ip-rate-limit-bypass2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6083-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6082-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6088-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6086-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6087-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6084-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6085-stored-cross-site-scripting-in-stockagile-by-novadigits-technologies2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92713-modula-image-gallery-302-missing-authorization-to-authenticated-author-arbitrary-file-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89426-knit-pay-9610-authenticated-subscriber-privilege-escalation-via-gravity-forms-role-fi-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19804-s2member-260814-unauthenticated-remote-code-execution-via-firstname-parameter-in-payp-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92608-apache-qpid-broker-j-incomplete-property-conversion-handling-from-amqp-10-to-amqp-0-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92609-apache-qpid-broker-j-missing-http-session-renewal-after-successful-authentication2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95864-themify-builder-781-unauthenticated-stored-cross-site-scripting-via-cssfonts-paramete2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89426-knit-pay-9610-authenticated-subscriber-privilege-escalation-via-gravity-forms-role-fi2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94573-repeater-fields-for-elementor-forms-227-unauthenticated-stored-cross-site-scripting-v2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19804-s2member-260814-unauthenticated-remote-code-execution-via-firstname-parameter-in-payp2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12037-asset-cleanup-page-speed-booster-1405-authenticated-administrator-server-side-request2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84280-fancy-product-designer-652-unauthenticated-stored-cross-site-scripting-via-shortcode2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89406-modula-image-gallery-301-missing-authorization-to-unauthenticated-private-gallery-ima2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13179-wp-maps-498-authenticated-subscriber-stored-cross-site-scripting-via-shapesvalues-par2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93901-optima-express-idx-875-unauthenticated-privilege-escalation-to-ihfclearcache-ajax-act2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95866-user-profile-builder-402-unauthenticated-stored-cross-site-scripting-via-avatar-field2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-17602-ssl-zen-4742-authenticated-administrator-path-traversal-to-arbitrary-file-read-via-fi2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96568-restaurant-menu-and-food-ordering-2414-unauthenticated-stored-cross-site-scripting-vi2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93656-user-profile-builder-402-authenticated-subscriber-stored-cross-site-scripting-via-ava2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13456-wp-maps-498-authenticated-subscriber-local-file-inclusion-via-page-parameter2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-17577-ssl-zen-4742-reflected-cross-site-scripting-via-uri-parameter2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93654-premium-packages-721-unauthenticated-stored-cross-site-scripting-via-cartitemsproduct2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92713-modula-image-gallery-302-missing-authorization-to-authenticated-author-arbitrary-file2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88996-wpforms-202-reflected-cross-site-scripting-via-pagetitle-post-parameter2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93747-wpforo-forum-316-authenticated-subscriber-stored-cross-site-scripting-via-telegram-pr2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96752-zero-spam-for-wordpress-5710-unauthenticated-stored-cross-site-scripting-via-nested-p2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96448-keycloak-services-keycloak-services-fgap-v2-composite-blind-role-mapping-allows-privi2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97846-keycloak-services-keycloak-services-standard-token-exchange-v2-bypasses-mtls-holder-o2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96766-geodirectory-28183-authenticated-subscriber-stored-cross-site-scripting-via-businessh2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93399-online-scheduling-and-appointment-booking-system-282-insecure-direct-object-reference2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89055-customer-reviews-for-woocommerce-51200-missing-authorization-to-unauthenticated-arbit2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62062-wordpress-elementor-website-builder-plugin-431-cross-site-request-forgery-csrf-vulner2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14281-automation-web-platform-486-unauthenticated-privilege-escalation-via-wawpcustomfields2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97721-sanluan-publiccms-exportexcelexportdata-sysuseradmincontrollerjava-cmscontentadmincon2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97818-phpipam-user-api-authorization-bypass-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97818-phpipam-user-api-authorization-bypass2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97737-wakapi-account-takeover-via-user-caching-service-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97764-django-allauth-authentication-rate-limit-bypass2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cloudflare-fixes-flaw-that-let-one-container-read-another-customers-leftover-disk-data2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97736-tinyauth-authorization-bypass-via-unanchored-regular-expression2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97735-itflow-svg-file-upload-vulnerability-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97735-itflow-svg-file-upload-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14814-css-javascript-toolbox-1206-authenticated-contributor-stored-cross-site-scripting-via2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97732-ironmace-ironshield-kernel-driver-improper-certificate-validation-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97650-ningzichun-student-management-system-addlogphp-echo-cross-site-scripting2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97730-netgate-pfsense-dashboard-local-file-inclusion-vulnerability-12026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97724-software-mansion-react-native-worklets-prototype-pollution-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97731-minio-improper-signature-verification-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97730-netgate-pfsense-dashboard-local-file-inclusion-vulnerability2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97723-madpsy-ka9qubersdr-stored-cross-site-scripting2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97649-ningzichun-student-management-system-examplelitesql-default-credentials2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95811-lemonldapnghandler-versions-from-200-before-21610-from-2170-before-2216-from-2220-bef2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97648-ningzichun-student-management-system-cross-site-request-forgery2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97646-ningzichun-student-management-system-getstudentphp-authorization2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53493-containerd-has-image-pull-dos-via-crafted-oci-index-graph-amplification2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92289-lemonldapngportal-versions-from-2230-before-2234-for-perl-allow-a-pkce-bypass-for-pub2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85417-incomplete-property-masking-in-the-sannav-logging-subsystem2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92288-lemonldapngportal-versions-from-2200-before-2216-from-2220-before-2234-for-perl-allow2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97647-ningzichun-student-management-system-editlogphp-authorization2026-09-25weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85082-maple-media-root-browser-classic-330-os-command-injection-through-crafted-sqlite-file-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85082-maple-media-root-browser-classic-330-os-command-injection-through-crafted-sqlite-file2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84283-flutecode-secure-folder-12-plaintext-vault-files-in-shared-storage-bypass-the-pin-gat2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97387-rejected-reason-this-cve-is-a-duplicate-of-anothe2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97230-iosocketsslselfcertificate-versions-100-for-perl-contains-malware-which-executes-pyth2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87722-regular-expression-denial-of-service-redos-in-search-query-predicates-and-rest-filter-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87722-regular-expression-denial-of-service-redos-in-search-query-predicates-and-rest-filter2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87721-denial-of-service-via-exponential-backtracking-in-antlr-search-query-parser-in-gerrit2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87721-denial-of-service-via-exponential-backtracking-in-antlr-search-query-parser-in-gerrit-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87720-incorrect-authorization-via-stale-projectcache-eviction-and-repeated-git-suffixes-in2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97636-apache-airflow-hashicorp-provider-hashicorp-vault-secrets-backend-team-scope-guard-by2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85491-catalystseal-versions-before-003-for-perl-allow-one-request-to-disable-a-path-or-rout2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95699-mrsteam-isteamx-improper-isolation-or-compartmentalization-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95699-mrsteam-isteamx-improper-isolation-or-compartmentalization2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93353-copyparty-sftp-volume-restriction-bypass-via-mkdirrmdirchattr-handlers2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97366-jhen0409-react-native-debugger-open-in-editor-windowjs-opendevtools-os-command-inject2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97368-chillzhuang-springblade-user-auth-info-endpoint-userserviceimpljava-userserviceimplus2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88386-libsndfile-memory-misalignment-denial-of-service2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88387-libraw-incorrect-numeric-conversion-denial-of-service-vulnerability2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88388-espruino-stack-based-buffer-overflow2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87118-botslab-g980h-dashcams-out-of-bounds-write2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84403-botslab-g980h-dashcams-missing-authentication-for-critical-function2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82716-botslab-g980h-dashcams-insertion-of-sensitive-information-into-log-file2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82585-botslab-g980h-dashcams-cleartext-transmission-of-sensitive-information2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82708-botslab-g980h-dashcams-improper-limitation-of-a-pathname-to-a-restricted-directory2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81630-botslab-g980h-dashcams-insufficient-verification-of-data-authenticity-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81630-botslab-g980h-dashcams-insufficient-verification-of-data-authenticity2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79959-botslab-g980h-dashcams-use-of-hard-coded-credentials2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75558-botslab-g980h-dashcams-use-of-hard-coded-cryptographic-key2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14443-incomplete-log-sanitization-during-bulk-ipsec-policy-collection-in-brocade-sannav-bef-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14443-incomplete-log-sanitization-during-bulk-ipsec-policy-collection-in-brocade-sannav-bef2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14442-information-exposure-vulnerability-in-the-job-scheduling-component-of-sannav-before-32026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14441-logic-flaw-in-sannav-java-cache-key-handling-object-comparison-handling2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97365-chonkie-inc-littrs-librs-mount-path-traversal2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88956-botslab-g980h-dashcams-missing-authentication-for-critical-function2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93354-taskview-community-missing-authentication-via-oauth-dynamic-client-registration2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93354-taskview-community-missing-authentication-via-oauth-dynamic-client-registration-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88761-botslab-g980h-dashcams-use-of-weak-credentials2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77967-botslab-g980h-dashcams-authentication-bypass-by-capture-replay2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77967-botslab-g980h-dashcams-authentication-bypass-by-capture-replay-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85496-botslab-g980h-dashcams-generation-of-predictable-numbers-or-identifiers2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85496-botslab-g980h-dashcams-generation-of-predictable-numbers-or-identifiers-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97326-songxinjianqwe-chat-chat-server-chatserverjava-server-side-request-forgery2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48543-krayin-crm-226-stored-template-injection-xss-via-web-form-description2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82566-botslab-g980h-dashcams-insufficient-session-expiration-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82566-botslab-g980h-dashcams-insufficient-session-expiration2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48542-krayin-crm-226-stored-template-injection-xss-via-product-name-field2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48541-krayin-crm-226-stored-template-injection-xss-via-contact-name-field2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97325-yunaivzhijiantianya-ruoyi-vue-pro-oauth2-client-oauth2clientserviceimpljava-validoaut2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48540-krayin-crm-226-stored-template-injection-xss-via-lead-title2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93291-improper-certificate-validation-in-eufy-omni-c20-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93291-improper-certificate-validation-in-eufy-omni-c202026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84399-botslab-g980h-dashcams-incorrect-authorization2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84399-botslab-g980h-dashcams-incorrect-authorization-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93290-use-of-hard-coded-credentials-in-eufy-omni-c202026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93289-os-command-injection-in-eufy-omni-c20-omni-x10-pro-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93289-os-command-injection-in-eufy-omni-c20-omni-x10-pro2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97320-yunaivzhijiantianya-ruoyi-vue-pro-ai-knowledge-aiknowledgedocumentserviceimpljava-aik2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97322-yunaivzhijiantianya-ruoyi-vue-pro-file-upload-filecontrollerjava-cross-site-scripting2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97321-yunaivzhijiantianya-ruoyi-vue-pro-goview-data-endpoint-goviewdataserviceimpljava-govi2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97323-yunaivzhijiantianya-ruoyi-vue-pro-file-upload-mpmaterialserviceimpljava-getoriginalfi2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96747-forced-local-unix-socket-connection-via-dot-sock-kms-endpoint-in-client-side-field-en2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96749-heap-out-of-bounds-write-via-signed-size-overflow-in-bson-document-encoding-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96748-connection-redirection-via-percent-encoded-delimiter-injection-in-connection-string-h2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96749-heap-out-of-bounds-write-via-signed-size-overflow-in-bson-document-encoding2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96748-connection-redirection-via-percent-encoded-delimiter-injection-in-connection-string-h-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89325-rapid7-insight-agent-uncontrolled-search-path-element-in-insightvm-assessment-content2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86859-unauthenticated-arbitrary-record-disclosure-in-servicenow-ai-platform2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82371-plaintext-exposure-of-sensitive-authentication-data-in-sannav-discovery-service-log-f2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86858-unauthenticated-privilege-escalation-via-graphql-in-servicenow-ai-platform2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86860-unauthenticated-sensitive-data-disclosure-in-servicenow-ai-platform2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86857-authorization-bypass-in-servicenow-ai-platform2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81455-dell-thinos-missing-authentication-for-critical-function-vulnerability2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82157-dell-thinos-improper-certificate-validation-vulnerability2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81473-dell-rugged-control-center-improper-authorization-elevation-of-privilege2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77294-trek-server-side-request-forgery-via-user-configurable-llm-base-url2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61825-code16sharp-has-a-stored-xss-via-data-html-content-sanitizer-bypass2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13249-unauthenticated-rce-arbitrary-file-upload-honeywell-pd45-industrial-printer-version-f2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13248-authenticated-remote-code-execution-via-arbitrary-file-write-in-the-intermec-fingerpr2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13016-unauthenticated-sql-injection-in-servicenow-ai-platform2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82372-improper-handling-of-sensitive-data-during-ipsec-policy-creation-and-modification-in2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-96883-type-confusion-in-aws-pgcollection-allows-remote-code-execution2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=unpatched-oneplus-flaws-let-installed-android-apps-gain-root-without-permissions-12026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=unpatched-oneplus-flaws-let-installed-android-apps-gain-root-without-permissions2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93405-mailspring-stored-xss-in-attachment-quick-preview-unsanitized-markdowndocxxlsx-conver2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61816-zbatesonmail-mime-parser-has-uncontrolled-resource-consumption-cpumemory-dos-parsing2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61815-zbatesonmail-mime-parser-has-crlf-header-injection-via-attachment-filename2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81508-esf-idf-heap-out-of-bounds-read-in-bluedroid-a2dp-sink-media-packet-processing2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=threatsday-ai-search-poisoning-ai-coding-tool-leaking-repos-one-click-code-execution-and-13-more-sto2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-71540-wazuh-manager-cluster-header-parsing-allows-pre-authentication-memory-exhaustion2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61741-http4s-scala-xml-has-an-xml-external-entity-xxe-processing-issue2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61811-wazuh-unbounded-recursion-in-osxml-getattributes-causes-analysisd-worker-thread-stack2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61604-ixo-blockchain-xbonds-did-resolved-payer-drain-xentity-ica-authorization-bypass2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61732-decepticon-role-boundary-forgery-via-chatml-special-token-literals-in-web-crawl-outpu2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63645-openobserve-unauthenticated-configruntime-endpoint-exposes-postgresql-database-creden2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54461-habitica-regex-injection-redos-in-member-search2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61788-bytebasedbhubs-read-only-mode-does-not-prevent-database-writes2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61784-xhtml-purifier-has-html-attribute-injection-sanitizer-bypass-that-leads-to-xss2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85056-zitadel-mfa-bypass-via-session-reuse-in-login-v22026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61782-rsdoctorrspack-plugin-has-unauthenticated-http-api-that-exposes-project-source-code-a2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85057-zitadel-actions-v1-sandbox-escape-host-file-read-via-require2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97233-volotat-anagnorisis-media-filename-playlistmanagerjs-html-cross-site-scripting2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61742-dbhub-http-transport-dns-rebinding-allows-unauthenticated-browser-origin-sql-executio2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57179-social-auth-core-has-a-session-fixation-issue2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57178-social-auth-core-vk-app-backend-accepts-unsigned-callback-data-when-authkey-is-missin2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57177-social-auth-core-has-login-csrf-via-missing-state-parameter-in-loginradius-backend2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57176-social-auth-core-vulnerable-to-account-takeover-via-identity-binding-flaw-in-vend-bac2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97520-gfs2-move-quotainit-qc-iterator-increment2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97521-gfs2-fix-quota-init-duplicate-scan2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-97519-drmxe-fix-null-pointer-dereference-in-devcoredump-cleanup2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94609-authentik-privilege-escalation-to-superuser-via-group-hierarchy2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94611-authentik-stored-credentials-are-readable-with-view-permission-alone2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94606-authentik-mfa-bypass-via-state-confusion-parameter-injection-in-authenticatoremailsta2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91160-openwa-a-read-only-api-key-can-receive-a-session-pairing-qr-over-the-websocket-event2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91122-discourse-chat-messagebus-delivers-read-restricted-messages-to-unauthorized-users2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79766-termix-os-command-injection-in-acmelets-encrypt-certificate-request-handler-via-admin2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56744-bsvwallet-toolbox-client-mobile-dont-verify-storage-supplied-recipient-output-scripts2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63498-snipe-it-stored-xss-via-inline-xml-rendering-in-the-uploaded-files-api2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63493-snipe-it-2fa-bypass-via-the-api-token-flow2026-09-24weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62368-snipe-it-stored-xss-via-custom-field-name-in-asset-list-column-headers2026-09-24weekly0.8