CVE-2025-15279

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1184/ 2025-12-31 07:37:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbe7db4af2u 2026-01-07 16:04:37+00:00| published-proof-of-concept|...

CVE-2025-15061

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1197/ 2026-01-23 14:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3udvkxxc2g...

PT-2025-53820

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to parsing PFB files, potentially allowing a remote attacker to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicio...

PT-2025-53827

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to parsing SFD files. The issue is a use-after-free condition resulting from a lack of validation before operating on an object. This can allow a remote...

0day-GigaCage-Webkit

WebKit Gigacage iOS 26.2 Advisory ID: CVE Pending...

Linux Distros Unpatched Vulnerability : CVE-2025-67621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow...

CVE-2025-67621

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

CVE-2025-14500

IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling o...

EUVD-2025-205284

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

CVE-2025-67621

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

CVE-2025-67621

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

UBUNTU-CVE-2025-67621

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

CVE-2025-67621 WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

CVE-2025-67621

The CVE-2025-67621 entry concerns the WordPress plugin Eight Day Week Print Workflow (versions up to and including 1.2.5). The vulnerability is an information-disclosure flaw that allows an unauthorized control field to retrieve embedded sensitive data, exposing sensitive system information. Affe...

CVE-2025-67621 WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

PT-2025-53239

Name of the Vulnerable Software and Affected Versions 10up Eight Day Week Print Workflow versions through 1.2.5 Description The Eight Day Week Print Workflow software contains a flaw that allows unauthorized retrieval of embedded sensitive data, leading to exposure of sensitive system information...

WordPress plugin Eight Day Week Print Workflow 安全漏洞

WordPress Eight Day Week Print Workflow plugin is a tool designed for news organizations or publishing teams. The WordPress Eight Day Week Print Workflow plugin suffers from an information disclosure vulnerability that originates from allowing an unauthorized control field to retrieve embedded...

Arbitrary Code Injection

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Arbitrary Code Injection via the convertconfig function. An attacker can execute arbitrary code by supplying a malicious checkpoint file that is process...

CVE-2025-13715

creationtimestamp| type| source ---|---|--- 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1183/...

CVE-2025-68614

creationtimestamp| type| source ---|---|--- 2025-12-22 22:57:33+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1182/...