CVE-2025-14927

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...

CVE-2025-14924

A flaw was found in the Hugging Face Transformers library. The parsing of checkpoints fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious megatrongpt2 model, resulting in arbitrary code execution in the...

CVE-2025-14920

A flaw was found in the Hugging Face Transformers library. The parsing of model files fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious Perceiver model or convincing a user to visit a malicious page,...

CVE-2025-13773

creationtimestamp| type| source ---|---|--- 2025-12-24 05:37:02+00:00| seen| https://infosec.exchange/users/offseq/statuses/115772923621574352 2025-12-24 05:37:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mapkafmwk626 2025-12-24 05:45:28+00:00| seen|...

CVE-2025-15047

creationtimestamp| type| source ---|---|--- 2025-12-23 22:26:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771230864366071 2025-12-23 22:50:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115771323829528233 2025-12-24 01:44:31+00:00| seen|...

CVE-2021-47721

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzqnfgc2p 2025-12-23 21:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoobg5aja2c...

CVE-2021-47739

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzhxpow2u 2025-12-23 21:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maopf7tybq2g 2025-12-24 02:22:25+00:00| seen|...

CVE-2025-65354

creationtimestamp| type| source ---|---|--- 2025-12-23 20:45:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maomjrdg2e2z 2025-12-23 21:00:05+00:00| exploited| Telegram/4QOnyeYClTC0SMJQhtMgvSiM85xnm7m1QqUSxY6BArIyUs 2025-12-23 21:08:29+00:00| seen|...

CVE-2025-29229

creationtimestamp| type| source ---|---|--- 2025-12-23 18:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoeurwrq22y 2025-12-23 19:05:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maogwatm7u2u...

CVE-2025-29228

creationtimestamp| type| source ---|---|--- 2025-12-23 18:13:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115770235900335391 2025-12-23 18:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoe37jhtk2x 2025-12-23 19:40:09+00:00| seen|...

CVE-2025-68561

creationtimestamp| type| source ---|---|--- 2025-12-23 13:08:27+00:00| seen| https://gist.github.com/Darkcrai86/f5c492ad31d9789c8c4af752eb61d1c5 2025-12-23 13:33:32+00:00| seen| https://gist.github.com/Darkcrai86/6e9ec49dccfe5ab6d8bb2f54dd8cd7b7 2025-12-23 15:54:24+00:00| seen|...

CVE-2025-68560

creationtimestamp| type| source ---|---|--- 2025-12-23 13:08:01+00:00| seen| https://gist.github.com/Darkcrai86/5afbb155a5e8dd267f37187d22637a74 2025-12-23 13:33:08+00:00| seen| https://gist.github.com/Darkcrai86/33b9c11e5a4bc60ea0e1fe7eed5e87a0 2025-12-23 15:22:59+00:00| seen|...

CVE-2025-68546

creationtimestamp| type| source ---|---|--- 2025-12-23 13:05:46+00:00| seen| https://gist.github.com/Darkcrai86/ce7b451bc6d2de555cce755f5f624e08 2025-12-23 13:30:40+00:00| seen| https://gist.github.com/Darkcrai86/a68cb99736abcafce40cf413fa1c64ff 2025-12-23 15:16:58+00:00| seen|...

CVE-2025-68550

creationtimestamp| type| source ---|---|--- 2025-12-23 12:18:58+00:00| seen| https://bsky.app/profile/potato.software/post/3manqa6dtij2r 2025-12-23 13:06:49+00:00| seen| https://gist.github.com/Darkcrai86/167cd0f0d11e510b8eccee269887e051 2025-12-23 13:31:40+00:00| seen|...

CVE-2025-47761

creationtimestamp| type| source ---|---|--- 2025-12-23 12:16:46+00:00| seen| https://poliverso.org/objects/0477a01e-47032880-2067098942d068cb 2025-12-23 12:18:57+00:00| seen| https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3manq5hlshov2...

Assessing SIEM effectiveness

A SIEM is a complex system offering broad and flexible threat detection capabilities. Due to its complexity, its effectiveness heavily depends on how it is configured and what data sources are connected to it. A one-time SIEM setup during implementation is not enough: both the organization's...

Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-67418

creationtimestamp| type| source ---|---|--- 2025-12-23 02:36:05+00:00| seen| https://infosec.exchange/users/offseq/statuses/115766549791065291 2025-12-23 02:36:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mampnweqso2y 2026-01-02 18:48:53+00:00| published-proof-of-concept|...

CVE-2025-61740

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device...

CERTFR-2025-ACT-056

creationtimestamp| type| source ---|---|--- 2025-12-22 13:56:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3malf7z6yfx2c 2025-12-22 13:56:43+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115763563781757176 2025-12-28 01:17:54+00:00| seen|...