ZDI-25-801: (0Day) (Pwn2Own) Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR. Authentication is not required to... 07/08/2025 Zero-Day Initiative
ZDI-25-800: (0Day) (Pwn2Own) Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
ZDI-25-799: (0Day) (Pwn2Own) Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
ZDI-25-798: (0Day) (Pwn2Own) Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
ZDI-25-797: (0Day) (Pwn2Own) Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
ZDI-25-796: (0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
ZDI-25-795: (0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
ZDI-25-794: (0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not... 07/08/2025 Zero-Day Initiative
Adobe Experience Manager Forms on JEE Zero-day Vulnerabilities (CVE-2025-54253 & CVE-2025-54254) Adobe released an emergency update to address two zero-day vulnerabilities (CVE-2025-54253 & CVE-2025-54254) impacting Adobe Experience Manager (AEM) Forms on... 07/08/2025 Qualys-Threat-Protect
ZDI-25-775: (0Day) Google Chrome SwiftShader Out-Of-Bound Write Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Google Chrome. User interaction is required to... 06/08/2025 Zero-Day Initiative
