Exploit for Insufficient Type Distinction in Rarlab Winrar

CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...

GHSA-9PF3-7RRR-X5JH

creationtimestamp| type| source ---|---|--- 2025-12-26 22:00:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115788113971481272 2025-12-26 22:00:18+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3mawc4er4xj2g...

CVE-2025-13915

creationtimestamp| type| source ---|---|--- 2025-12-26 14:43:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115786396429197847 2025-12-26 15:44:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115786635668538679 2025-12-27 06:04:12+00:00| seen|...

CVE-2025-59887

creationtimestamp| type| source ---|---|--- 2025-12-26 07:23:08+00:00| seen| https://bsky.app/profile/potato.software/post/3maur3wpuvv25 2025-12-26 07:44:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mausbxeisj2g 2025-12-26 08:31:01+00:00| seen|...

CVE-2025-15089

creationtimestamp| type| source ---|---|--- 2025-12-26 05:06:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/115784126495040116 2025-12-26 05:06:07+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3maujguwkrc26...

The vulnerability in the Request Handling component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to bypass existing security restrictions.

The vulnerability in the Request Handling component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions...

CVE-2025-68565

creationtimestamp| type| source ---|---|--- 2025-12-25 09:04:11+00:00| seen| https://infosec.exchange/users/offseq/statuses/115779400480479619 2025-12-25 09:04:12+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3masgbqdmoc2p...

CVE-2018-25154

creationtimestamp| type| source ---|---|--- 2025-12-24 21:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar7hg3gcr2x 2025-12-24 21:48:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marak2ikez2p...

CVE-2019-25240

creationtimestamp| type| source ---|---|--- 2025-12-24 21:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar5wtnhaa22 2025-12-24 21:48:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marajsujz52f...

CVE-2019-25237

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5kafqhz2e 2025-12-24 21:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6dwyngo2m...

CVE-2019-25236

creationtimestamp| type| source ---|---|--- 2025-12-24 20:55:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar5jzo6uj2a 2025-12-24 21:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maraayjehi2q 2026-01-05 16:34:14+00:00| seen|...

CVE-2025-14928

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious HuBERT model checkpoint, causing arbitrary code execution in the contex...

CVE-2025-14927

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...

CVE-2025-14924

A flaw was found in the Hugging Face Transformers library. The parsing of checkpoints fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious megatrongpt2 model, resulting in arbitrary code execution in the...

CVE-2025-14920

A flaw was found in the Hugging Face Transformers library. The parsing of model files fails to validate user-supplied data, causing a deserialization of untrusted data. An attacker can exploit this issue by providing a malicious Perceiver model or convincing a user to visit a malicious page,...

CVE-2025-13773

creationtimestamp| type| source ---|---|--- 2025-12-24 05:37:02+00:00| seen| https://infosec.exchange/users/offseq/statuses/115772923621574352 2025-12-24 05:37:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mapkafmwk626 2025-12-24 05:45:28+00:00| seen|...

CVE-2025-15047

creationtimestamp| type| source ---|---|--- 2025-12-23 22:26:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771230864366071 2025-12-23 22:50:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115771323829528233 2025-12-24 01:44:31+00:00| seen|...

CVE-2021-47721

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzqnfgc2p 2025-12-23 21:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoobg5aja2c...

CVE-2021-47739

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzhxpow2u 2025-12-23 21:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maopf7tybq2g 2025-12-24 02:22:25+00:00| seen|...

CVE-2025-65354

creationtimestamp| type| source ---|---|--- 2025-12-23 20:45:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maomjrdg2e2z 2025-12-23 21:00:05+00:00| exploited| Telegram/4QOnyeYClTC0SMJQhtMgvSiM85xnm7m1QqUSxY6BArIyUs 2025-12-23 21:08:29+00:00| seen|...