ZDI-25-920: Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain... 01/10/2025 Zero-Day Initiative
ZDI-25-919: Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain... 01/10/2025 Zero-Day Initiative
Malicious MCP Server on npm postmark-mcp Exploited in Attack Security researchers discovered a significant vulnerability in the Model Context Protocol (MCP) server that was exploited in the wild. The... 30/09/2025 Qualys-Threat-Protect
ZDI-25-918: Fortinet FortiWeb _cmf_get_config_file_path Directory Traversal Information Disclosure Vulnerability This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb. Authentication is required to exploit... 27/09/2025 Zero-Day Initiative
Cisco Addresses Zero-day Vulnerabilities in Cisco ASA and FTD Software (CVE-2025-20362 & CVE-2025-20333) Cisco warns its users to patch two actively exploited vulnerabilities impacting the VPN web server of Cisco Secure Firewall Adaptive... 27/09/2025 Qualys-Threat-Protect
Cisco IOS and IOS XE Software Vulnerability Exploited in the Wild (CVE-2025-20352) Cisco released a security advisory to address an actively exploited vulnerability, tracked as CVE-2025-20352, impacting Cisco IOS and IOS XE... 26/09/2025 Qualys-Threat-Protect
ZDI-25-917: Linux Kernel ksmbd generate_key context.iov_base Null Pointer Dereference Denial-of-Service Vulnerability This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel. Authentication is required... 25/09/2025 Zero-Day Initiative
ZDI-25-916: Linux Kernel ksmbd smb2_sess_setup Preauth_HashValue Race Condition Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit... 25/09/2025 Zero-Day Initiative
ZDI-25-915: Linux Kernel io_uring Futex Request Use-After-Free Local Privilege Escalation Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the... 25/09/2025 Zero-Day Initiative
ZDI-25-914: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit... 25/09/2025 Zero-Day Initiative
