Arbitrary Code Injection

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Arbitrary Code Injection via the convertconfig function. An attacker can execute arbitrary code by supplying a malicious checkpoint file that is process...

CVE-2025-13715

creationtimestamp| type| source ---|---|--- 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1183/...

CVE-2025-68614

creationtimestamp| type| source ---|---|--- 2025-12-22 22:57:33+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1182/...

Energy-Efficient Multi-LLM Reasoning for Binary-Free Zero-Day Detection in IoT Firmware

Securing Internet of Things IoT firmware remains difficult due to proprietary binaries, stripped symbols, heterogeneous architectures, and limited access to executable code. Existing analysis methods, such as static analysis, symbolic execution, and fuzzing, depend on binary visibility and...

Hackers Stole Millions of PornHub Users’ Data for Extortion

Plus: Cisco discloses a zero-day with no available patch, Venezuela accuses the US of a cyberattack, and more...

CVE-2025-14497

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1168/...

CVE-2025-14490

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1166/...

CVE-2025-14489

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1165/...

CVE-2025-66498

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1179/...

CVE-2025-66494

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1175/...

CVE-2025-66495

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1176/...

CVE-2025-66496

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1177/...

CVE-2025-14496

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1171/...

CVE-2025-14494

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1163/...

CVE-2025-14488

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1167/...

CVE-2025-14492

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1172/...

Exploit for CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalatio...

CVE-2025-14934

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1152/...

CVE-2025-14936

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1155/...

CVE-2025-14928

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1146/ 2025-12-23 21:34:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...