5655 matches found
CVE-2025-15273
creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1191/ 2025-12-31 07:42:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbei4numa2m 2025-12-31 08:57:32+00:00| seen|...
PT-2025-53820
Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to parsing PFB files, potentially allowing a remote attacker to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicio...
PT-2025-53827
Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to parsing SFD files. The issue is a use-after-free condition resulting from a lack of validation before operating on an object. This can allow a remote...
0day-GigaCage-Webkit
WebKit Gigacage iOS 26.2 Advisory ID: CVE Pending...
CVE-2025-14500
IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling o...
Arbitrary Code Injection
Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Arbitrary Code Injection via the convertconfig function. An attacker can execute arbitrary code by supplying a malicious checkpoint file that is process...
CVE-2025-13715
creationtimestamp| type| source ---|---|--- 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1183/...
CVE-2025-68614
creationtimestamp| type| source ---|---|--- 2025-12-22 22:57:33+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1182/...
Energy-Efficient Multi-LLM Reasoning for Binary-Free Zero-Day Detection in IoT Firmware
Securing Internet of Things IoT firmware remains difficult due to proprietary binaries, stripped symbols, heterogeneous architectures, and limited access to executable code. Existing analysis methods, such as static analysis, symbolic execution, and fuzzing, depend on binary visibility and...
Hackers Stole Millions of PornHub Users’ Data for Extortion
Plus: Cisco discloses a zero-day with no available patch, Venezuela accuses the US of a cyberattack, and more...
CVE-2025-14490
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1166/...
CVE-2025-14497
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1168/...
CVE-2025-14489
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1165/...
CVE-2025-66494
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1175/...
CVE-2025-66495
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1176/...
CVE-2025-66498
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1179/...
CVE-2025-14496
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1171/...
CVE-2025-14488
creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1167/...