Vulnerabilities
NoMachine Local Privilege Escalation Via Uncontrolled Search Path
A CVSS 7.8 flaw in NoMachine allows local attackers to gain higher privileges, requiring initial code execution on the target system.
Zero Day Initiative
Everything Packet Tribune has reported about Zero Day Initiative: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
QNAP TS-453E Format String Bug Allows Unauthenticated Remote Code Execution via Syslog
Zero Day Initiative details a high-severity format string vulnerability in QNAP TS-453E devices that allows remote attackers to execute code without credentials.