Reported exploitation with no confirmed CVE. Treat as unverified.https://exploit-id.pages.dev/enhttps://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.Thu, 22 Oct 2026 17:18:22 GMThttps://seclists.org/fulldisclosure/2026/Oct/34https://seclists.org/fulldisclosure/2026/Oct/34Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet TV-IP302PI firmware 1.02.38, the closed-source IP surveillance camera from TRENDnet (United States). The camera's application daemon is shipped at /hunt/hunt_server: aTue, 20 Oct 2026 18:50:07 GMThttps://seclists.org/fulldisclosure/2026/Oct/33https://seclists.org/fulldisclosure/2026/Oct/33Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Royal Render 9.1.26b, the closed-source render-farm job manager for VFX and animation studios from Binary Alchemy (proprietor Holger Schoenberger) of Ludwigsburg, Germany. Royal RenTue, 20 Oct 2026 18:50:06 GMThttps://seclists.org/fulldisclosure/2026/Oct/32https://seclists.org/fulldisclosure/2026/Oct/32Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the ProSoft RLX-IFH24E, version v2.2.44, the industrial wireless radio from ProSoft Technology, Inc. (United States). The appliance is a closed-source embedded device and an OEM buiTue, 20 Oct 2026 18:50:05 GMThttps://seclists.org/fulldisclosure/2026/Oct/31https://seclists.org/fulldisclosure/2026/Oct/31Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT, the closed-source commercial continuous-testing, service-virtualisation and environment-management product from Parasoft, a UniTue, 20 Oct 2026 18:50:03 GMThttps://seclists.org/fulldisclosure/2026/Oct/30https://seclists.org/fulldisclosure/2026/Oct/30Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Exasol Database 7.1.30, the in-memory MPP analytical database from Exasol AG (Germany), examined in its docker-db single-container deployment form. The SQL engine is a proprietary CTue, 20 Oct 2026 18:50:02 GMThttps://seclists.org/fulldisclosure/2026/Oct/29https://seclists.org/fulldisclosure/2026/Oct/29Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750 SOHO wireless router from Edimax Technology Co., Ltd. (Taiwan). A single authenticated POST that looks Tue, 20 Oct 2026 18:50:00 GMThttps://seclists.org/fulldisclosure/2026/Oct/28https://seclists.org/fulldisclosure/2026/Oct/28Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750 SOHO wireless router from Edimax Technology Co., Ltd. (Taiwan). A single authenticated POST to a manufaTue, 20 Oct 2026 18:49:59 GMThttps://seclists.org/fulldisclosure/2026/Oct/21https://seclists.org/fulldisclosure/2026/Oct/21Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Synametrics Syncrify 6.2 build 1178, the closed-source incremental backup and file-replication server from Synametrics Technologies, Inc. (United States). The product is written in Thu, 15 Oct 2026 07:42:13 GMThttps://seclists.org/fulldisclosure/2026/Oct/20https://seclists.org/fulldisclosure/2026/Oct/20Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability chain in South River Technologies Titan MFT Server 26.0.0.364, the NextGen generation of the commercial managed file transfer server from South River Technologies (Annapolis, Maryland,Thu, 15 Oct 2026 07:42:12 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-756/http://www.zerodayinitiative.com/advisories/ZDI-26-756/This vulnerability allows remote attackers to execute arbitrary code on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8.Tue, 13 Oct 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-755/http://www.zerodayinitiative.com/advisories/ZDI-26-755/This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating ofTue, 13 Oct 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-754/http://www.zerodayinitiative.com/advisories/ZDI-26-754/This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5.Tue, 13 Oct 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-753/http://www.zerodayinitiative.com/advisories/ZDI-26-753/This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5.Tue, 13 Oct 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-752/http://www.zerodayinitiative.com/advisories/ZDI-26-752/This vulnerability allows remote attackers to execute arbitrary code on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8.Tue, 13 Oct 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-708/http://www.zerodayinitiative.com/advisories/ZDI-26-708/This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3.Wed, 16 Sep 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-615/http://www.zerodayinitiative.com/advisories/ZDI-26-615/This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.Mon, 31 Aug 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-614/http://www.zerodayinitiative.com/advisories/ZDI-26-614/This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.Mon, 31 Aug 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-613/http://www.zerodayinitiative.com/advisories/ZDI-26-613/This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.Mon, 31 Aug 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-612/http://www.zerodayinitiative.com/advisories/ZDI-26-612/This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.Mon, 31 Aug 2026 05:00:00 GMThttp://www.zerodayinitiative.com/advisories/ZDI-26-611/http://www.zerodayinitiative.com/advisories/ZDI-26-611/This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.Mon, 31 Aug 2026 05:00:00 GMT