Exploit for CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalatio...

CVE-2025-53435

CVE-2025-53435 corresponds to a WordPress Plan My Day theme vulnerability (<= 1.1.13) involving Local File Inclusion due to improper control of filename for include/require statements. The issue affects axiomthemes Plan My Day and Plan My Day: from n/a through

CVE-2025-53435 WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Plan My Day planmyday allows PHP Local File Inclusion.This issue affects Plan My Day: from n/a through = 1.1.13...

CVE-2025-53435 WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Plan My Day planmyday allows PHP Local File Inclusion.This issue affects Plan My Day: from n/a through = 1.1.13...

CVE-2025-14930

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1145/ 2025-12-23 21:34:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14932

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1153/...

CVE-2025-14926

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1147/ 2025-12-23 21:34:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14922

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1142/ 2025-12-23 21:34:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14920

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1150/ 2025-12-23 21:34:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14924

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1141/ 2025-12-23 21:34:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14921

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1149/ 2025-12-23 21:34:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14929

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1144/ 2025-12-23 21:34:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14928

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1146/ 2025-12-23 21:34:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...

CVE-2025-14931

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1143/ 2025-12-23 21:20:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maooiamqar2v 2025-12-23 21:34:48+00:00| seen|...

CVE-2025-14936

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1155/...

CVE-2025-14934

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1152/...

CVE-2025-14935

creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1154/...

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances

Cisco has alerted users to a maximum-severity zero-day flaw in Cisco AsyncOS software that has been actively exploited by a China-nexus advanced persistent threat APT actor codenamed UAT-9686 in attacks targeting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. The networking...

PT-2025-52386

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers affected versions not specified Description A flaw exists in Hugging Face Transformers related to the parsing of checkpoints, allowing remote attackers to execute arbitrary code. The issue stems from insufficient...

PT-2025-52391

Name of the Vulnerable Software and Affected Versions NSF Unidata NetCDF-C affected versions not specified Description A flaw exists in the parsing of variable names, stemming from insufficient validation of user-supplied data length before copying it into a fixed-length stack-based buffer. This...