CVE-2019-25236

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5jzo6uj2a 2025-12-24 21:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maraayjehi2q 2026-01-05 16:34:14+00:00| seen|...

CVE-2025-14928

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious HuBERT model checkpoint, causing arbitrary code execution in the contex...

CVE-2025-14927

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...

CVE-2025-14924

A flaw was found in the Hugging Face Transformers library. The parsing of checkpoints fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious megatrongpt2 model, resulting in arbitrary code execution in the...

CVE-2025-14920

A flaw was found in the Hugging Face Transformers library. The parsing of model files fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious Perceiver model or convincing a user to visit a malicious page,...

CVE-2025-13773

creationtimestamp| type| source ---|---|--- 2025-12-24 05:37:02+00:00| seen| https://infosec.exchange/users/offseq/statuses/115772923621574352 2025-12-24 05:37:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mapkafmwk626 2025-12-24 05:45:28+00:00| seen|...

CVE-2025-15047

creationtimestamp| type| source ---|---|--- 2025-12-23 22:26:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771230864366071 2025-12-23 22:50:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115771323829528233 2025-12-24 01:44:31+00:00| seen|...

data-generation-tool (>=1.0.1, <=1.1.1), openrlhf (>=0.4.0, <=0.4.2) +2 more potentially affected by CVE-2025-14929 via transformers (4.43.3)

transformers PYPI version 4.43.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - data-generation-tool =1.0.1, =0.4.0, =0.0.1, =0.1.1, =0.2.1 Source cves: CVE-2025-14929 Source advisory: OSV:PYSEC-2025-217...

CVE-2021-47721

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzqnfgc2p 2025-12-23 21:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoobg5aja2c...

CVE-2021-47739

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzhxpow2u 2025-12-23 21:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maopf7tybq2g 2025-12-24 02:22:25+00:00| seen|...

CVE-2025-65354

creationtimestamp| type| source ---|---|--- 2025-12-23 20:45:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maomjrdg2e2z 2025-12-23 21:00:05+00:00| exploited| Telegram/4QOnyeYClTC0SMJQhtMgvSiM85xnm7m1QqUSxY6BArIyUs 2025-12-23 21:08:29+00:00| seen|...

CVE-2025-29229

creationtimestamp| type| source ---|---|--- 2025-12-23 18:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoeurwrq22y 2025-12-23 19:05:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maogwatm7u2u...

CVE-2025-29228

creationtimestamp| type| source ---|---|--- 2025-12-23 18:13:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115770235900335391 2025-12-23 18:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoe37jhtk2x 2025-12-23 19:40:09+00:00| seen|...

CVE-2025-68561

creationtimestamp| type| source ---|---|--- 2025-12-23 13:08:27+00:00| seen| https://gist.github.com/Darkcrai86/f5c492ad31d9789c8c4af752eb61d1c5 2025-12-23 13:33:32+00:00| seen| https://gist.github.com/Darkcrai86/6e9ec49dccfe5ab6d8bb2f54dd8cd7b7 2025-12-23 15:54:24+00:00| seen|...

CVE-2025-68560

creationtimestamp| type| source ---|---|--- 2025-12-23 13:08:01+00:00| seen| https://gist.github.com/Darkcrai86/5afbb155a5e8dd267f37187d22637a74 2025-12-23 13:33:08+00:00| seen| https://gist.github.com/Darkcrai86/33b9c11e5a4bc60ea0e1fe7eed5e87a0 2025-12-23 15:22:59+00:00| seen|...

CVE-2025-68546

creationtimestamp| type| source ---|---|--- 2025-12-23 13:05:46+00:00| seen| https://gist.github.com/Darkcrai86/ce7b451bc6d2de555cce755f5f624e08 2025-12-23 13:30:40+00:00| seen| https://gist.github.com/Darkcrai86/a68cb99736abcafce40cf413fa1c64ff 2025-12-23 15:16:58+00:00| seen|...

CVE-2025-68550

creationtimestamp| type| source ---|---|--- 2025-12-23 12:18:58+00:00| seen| https://bsky.app/profile/potato.software/post/3manqa6dtij2r 2025-12-23 13:06:49+00:00| seen| https://gist.github.com/Darkcrai86/167cd0f0d11e510b8eccee269887e051 2025-12-23 13:31:40+00:00| seen|...

CVE-2025-47761

creationtimestamp| type| source ---|---|--- 2025-12-23 12:16:46+00:00| seen| https://poliverso.org/objects/0477a01e-47032880-2067098942d068cb 2025-12-23 12:18:57+00:00| seen| https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3manq5hlshov2...

Assessing SIEM effectiveness

A SIEM is a complex system offering broad and flexible threat detection capabilities. Due to its complexity, its effectiveness heavily depends on how it is configured and what data sources are connected to it. A one-time SIEM setup during implementation is not enough: both the organization's...

Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...