Zero Day Initiative - CVE-2026-20841: Arbitrary Code Execution in the Windows Notepad
Remote code execution in Windows Notepad via improper validation of Markdown links can allow arbitrary command execution when a user opens a malicious file.
Zero Day Initiative - CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall
Arista NG Firewall's runTroubleshooting() fails to properly validate inputs, enabling command injection by passing unsanitized environment variables to network-troubleshooting.sh.
When ZeroWidth Isn't Zero: How I Found and Fixed a Vulnerability | Blog
Unicode Variation Selectors can inflate UTF-16 storage size while still passing perceived-length checks, enabling payload injection, performance issues, and possible database crashes.
Multiple high-severity input-validation vulnerabilities in Ivanti Endpoint Manager allow authenticated attackers to achieve remote code execution or local privilege escalation.