Lucene search
+L
Zero Day InitiativeRecent

17198 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:00 a.m.•15 views

(0Day) Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convertconfig functio...

7.8CVSS8.1AI score0.00342EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:00 a.m.•22 views

(0Day) Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convertconfig functio...

7.8CVSS8.1AI score0.00342EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:00 a.m.•25 views

(0Day) NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.9AI score0.00351EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:00 a.m.•14 views

(0Day) Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Diffusers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS8AI score0.00366EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:00 a.m.•23 views

(0Day) Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convertconfig functio...

7.8CVSS8.1AI score0.00342EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:00 a.m.•19 views

(0Day) Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS8AI score0.00369EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•15 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•19 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•26 views

AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00237EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•26 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•16 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•18 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•19 views

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•22 views

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•22 views

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•15 views

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XT...

7.8CVSS6.8AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•22 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00262EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•29 views

Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP Content-Length header. The issue results from the...

7.5CVSS6.8AI score0.00764EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

Autodesk AutoCAD CATPART File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•28 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00262EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•23 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00262EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•26 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00262EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•24 views

Microsoft Edge Mark-Of-The-Web Removal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS7.2AI score0.00407EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•13 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

Autodesk AutoCAD CATPRODUCT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•16 views

GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XCF files. The...

7.8CVSS7.9AI score0.00657EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The...

7.8CVSS7.9AI score0.00657EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•17 views

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The...

7.8CVSS7.9AI score0.00624EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•16 views

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The...

7.8CVSS7.9AI score0.00663EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•16 views

Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

7.8CVSS6.9AI score0.00191EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•22 views

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•24 views

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•26 views

Apple Safari JavaScriptCore HashTable Expansion Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS7.3AI score0.00773EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Junk...

7.3CVSS7.9AI score0.00262EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•25 views

Apple Safari JavaScriptCore FTL DataView byteLength Property Handling Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

8.8CVSS7.2AI score0.3414EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•20 views

Siemens Simcenter Femap SLDPRT File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score0.00198EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•21 views

Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•22 views

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:00 a.m.•17 views

Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

7.8CVSS6.8AI score0.00258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/16 12:00 a.m.•19 views

Fortinet FortiSandbox name Parameter Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the name parameter provided to the interface endpoint. The issue resul...

8.8CVSS8.5AI score0.17188EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/16 12:00 a.m.•17 views

Fortinet FortiSandbox upload_vdi_file Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadvdifile endpoint. The issue results from the lack of proper validation of a...

8.8CVSS8.5AI score0.17188EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/16 12:00 a.m.•21 views

Fortinet FortiSandbox hcproxy Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Minimal user interaction is required to exploit this vulnerability. The specific flaw exists within the handling of HA cluster paths. The issue results from the lack of proper...

5.5CVSS6.7AI score0.06313EPSS
SaveExploits0References1
Total number of security vulnerabilities17198