ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Jun 2, 2025 · ZeroDay Catalog

    Out-of-Bounds Vulnerability Discovered in Google Chromium V8 Engine

    A critical out-of-bounds read and write vulnerability has been identified in the Google Chromium V8 engine, potentially impacting multiple web browsers.

    What changed

    An out-of-bounds read and write vulnerability has been discovered in the Google Chromium V8 engine. This flaw could allow remote attackers to exploit heap corruption through specially crafted HTML content.

    Who is affected

    This vulnerability primarily affects various web browsers that are built on the Chromium platform. The following products are notably impacted:

    • Google Chrome
    • Microsoft Edge
    • Opera
    • Any other browser utilizing the Chromium V8 engine

    What to do

    Organizations and users should prioritize updating their web browsers to the latest versions to mitigate potential exploitation risks associated with this vulnerability.

    • Regularly check for updates from your browser vendor.
    • Implement security measures to monitor and block suspicious web content.
    • Educate users about the risks of opening untrusted HTML pages.

    Original report

  2. Research · May 21, 2025 · ZeroDay Catalog

    Critical Command Injection Vulnerability in Smartbedded Meteobridge

    A serious command injection vulnerability has been identified in Smartbedded's Meteobridge, allowing remote attackers to execute commands with elevated privileges.

    What changed

    A command injection vulnerability has been discovered in the web interface of Smartbedded's Meteobridge product. This flaw allows remote unauthenticated attackers to execute arbitrary commands with root privileges on affected devices.

    Who is affected

    The vulnerability impacts users of the Smartbedded Meteobridge system, particularly those utilizing its web interface for managing weather station data.

    Organizations relying on Meteobridge for weather data collection and management are at risk of unauthorized access and control.

    • Smartbedded Meteobridge users
    • Organizations managing weather stations
    • Administrators using the Meteobridge web interface

    What to do

    It is crucial for affected users to assess their exposure to this vulnerability and implement necessary security measures. Immediate actions should include reviewing access controls and monitoring for unusual activity.

    Stay updated on any patches or mitigations released by Smartbedded to address this vulnerability.

    • Review and restrict access to the Meteobridge web interface.
    • Monitor systems for any signs of unauthorized command execution.
    • Implement security best practices to mitigate risks.

    Original report