How Cisco Talos powers the solutions protecting your organization

Cisco Talos is Cisco's threat intelligence and security research organization that powers Cisco's product portfolio with that intelligence. While we are well known for the security research in our blog, vulnerability discoveries, and our open-source software, you may not be aware of exactly how o...

CVE-2026-21634

creationtimestamp| type| source ---|---|--- 2026-01-05 18:05:12+00:00| seen| Telegram/QHE3ZGhFyl2T5Z4zPcVefx-4WihQCgoreYtJ2GbiYf5-7cY 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-128/...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

rxerium-templates

rxerium-templates N...

PT-2026-25339

GNU inetutils telnetd versions prior to 2.8 Description A buffer overflow exists in the LINEMODE SLC Set Local Characters suboption handler of the telnetd daemon. The issue occurs because the add slc function does not verify if the buffer is full before copying data, leading to an out-of-bounds...

Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert

Outpacing React2Shell using pre-breach alerts from Wiz ASM to eliminate exploitable risk before attackers find them...

CVE-2025-15351

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1202/ 2026-01-23 13:59:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3ucyyrrs2h 2026-01-23 14:20:25+00:00| seen|...

CVE-2025-15349

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1200/ 2026-01-23 13:12:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3rp3gubn25...

CVE-2025-15348

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1199/ 2026-01-23 13:12:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3roumxtc2o...

PT-2025-54182

Name of the Vulnerable Software and Affected Versions Anritsu ShockLine affected versions not specified Description A network-adjacent attacker can execute arbitrary code on affected installations of Anritsu ShockLine without authentication. The issue stems from a race condition within the SCPI...

PT-2025-54184

Name of the Vulnerable Software and Affected Versions Anritsu VectorStar affected versions not specified Description A flaw exists in the parsing of CHX files due to insufficient validation of user-supplied data, leading to deserialization of untrusted data. This can allow remote attackers to...

Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert

Researchers reveal CVE-2025-54322, a critical unpatched flaw in XSpeeder networking gear found by AI agents. 70,000 industrial and branch devices are exposed...

CVE-2025-15269

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1195/ 2025-12-31 07:43:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbekkj3oq2z 2025-12-31 08:28:48+00:00| seen|...

CVE-2025-15271

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1193/ 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8 2026-01-07 17:08:14+00:00| seen|...

CVE-2025-15270

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1194/ 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8 2026-04-08 16:44:43+00:00| seen|...

CVE-2025-15273

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1191/ 2025-12-31 07:42:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbei4numa2m 2025-12-31 08:57:32+00:00| seen|...

CVE-2025-15276

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1187/ 2025-12-31 07:43:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbekdtpkq2z 2026-01-07 17:08:14+00:00| seen|...

CVE-2025-15275

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1189/ 2025-12-31 07:42:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbeijdej62b 2025-12-31 07:43:02+00:00| seen|...

CVE-2025-15278

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1185/ 2025-12-31 07:35:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbe3tkq7v27 2025-12-31 07:36:51+00:00| seen|...

CVE-2025-15280

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1188/ 2026-01-07 16:04:37+00:00| published-proof-of-concept| Telegram/C5Pt7uloxKJDrqitQkO17NAOQQ9eE92f4ibyk5mNwogme0...