CVE-2025-15227

creationtimestamp| type| source ---|---|--- 2025-12-29 08:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4fgcf6wr2u 2025-12-29 08:38:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4gpfkbvg2b...

CVE-2025-60458

creationtimestamp| type| source ---|---|--- 2025-12-29 07:00:12+00:00| published-proof-of-concept| Telegram/0bS8XmiBZ6DuNmG6E0qg4EB43hWsPVptPwfOUv0NgieIr48 2025-12-29 09:00:05+00:00| published-proof-of-concept| Telegram/Rk3Pm0xazzAxLfp-nWuprn3TjhkjdHjxxzptFTkeMZjK45M...

CVE-2025-15154 PbootCMS Header handle.php get_user_ip less trusted source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

CVE-2025-15154 PbootCMS Header handle.php get_user_ip less trusted source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

Exploit for Insufficient Type Distinction in Rarlab Winrar

CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...

GHSA-9PF3-7RRR-X5JH

creationtimestamp| type| source ---|---|--- 2025-12-26 22:00:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115788113971481272 2025-12-26 22:00:18+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3mawc4er4xj2g...

CVE-2025-13915

creationtimestamp| type| source ---|---|--- 2025-12-26 14:43:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115786396429197847 2025-12-26 15:44:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115786635668538679 2025-12-27 06:04:12+00:00| seen|...

CVE-2025-59887

creationtimestamp| type| source ---|---|--- 2025-12-26 07:23:08+00:00| seen| https://bsky.app/profile/potato.software/post/3maur3wpuvv25 2025-12-26 07:44:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mausbxeisj2g 2025-12-26 08:31:01+00:00| seen|...

CVE-2025-15089

creationtimestamp| type| source ---|---|--- 2025-12-26 05:06:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/115784126495040116 2025-12-26 05:06:07+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3maujguwkrc26...

The vulnerability in the Request Handling component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to bypass existing security restrictions.

The vulnerability in the Request Handling component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow a malicious actor to bypass existing security...

CVE-2025-68565

creationtimestamp| type| source ---|---|--- 2025-12-25 09:04:11+00:00| seen| https://infosec.exchange/users/offseq/statuses/115779400480479619 2025-12-25 09:04:12+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3masgbqdmoc2p...

CVE-2018-25154

creationtimestamp| type| source ---|---|--- 2025-12-24 21:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar7hg3gcr2x 2025-12-24 21:48:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marak2ikez2p...

CVE-2019-25240

creationtimestamp| type| source ---|---|--- 2025-12-24 21:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar5wtnhaa22 2025-12-24 21:48:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marajsujz52f...

CVE-2019-25237

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5kafqhz2e 2025-12-24 21:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6dwyngo2m...

CVE-2019-25236

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5jzo6uj2a 2025-12-24 21:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maraayjehi2q 2026-01-05 16:34:14+00:00| seen|...

CVE-2025-14928

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious HuBERT model checkpoint, causing arbitrary code execution in the contex...

CVE-2025-14927

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...

CVE-2025-14924

A flaw was found in the Hugging Face Transformers library. The parsing of checkpoints fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious megatrongpt2 model, resulting in arbitrary code execution in the...

CVE-2025-14920

A flaw was found in the Hugging Face Transformers library. The parsing of model files fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious Perceiver model or convincing a user to visit a malicious page,...

CVE-2025-13773

creationtimestamp| type| source ---|---|--- 2025-12-24 05:37:02+00:00| seen| https://infosec.exchange/users/offseq/statuses/115772923621574352 2025-12-24 05:37:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mapkafmwk626 2025-12-24 05:45:28+00:00| seen|...