Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert

Researchers reveal CVE-2025-54322, a critical unpatched flaw in XSpeeder networking gear found by AI agents. 70,000 industrial and branch devices are exposed...

CVE-2025-15279

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1184/ 2025-12-31 07:37:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbe7db4af2u 2026-01-07 16:04:37+00:00| published-proof-of-concept|...

CVE-2025-15271

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1193/ 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8 2026-01-07 17:08:14+00:00| seen|...

CVE-2025-15061

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1197/ 2026-01-23 14:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3udvkxxc2g...

CVE-2025-15275

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1189/ 2025-12-31 07:42:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbeijdej62b 2025-12-31 07:43:02+00:00| seen|...

CVE-2025-15280

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1188/ 2026-01-07 16:04:37+00:00| published-proof-of-concept| Telegram/C5Pt7uloxKJDrqitQkO17NAOQQ9eE92f4ibyk5mNwogme0...

CVE-2025-15269

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1195/ 2025-12-31 07:43:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbekkj3oq2z 2025-12-31 08:28:48+00:00| seen|...

CVE-2025-15278

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1185/ 2025-12-31 07:35:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbe3tkq7v27 2025-12-31 07:36:51+00:00| seen|...

CVE-2025-15270

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1194/ 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8 2026-04-08 16:44:43+00:00| seen|...

CVE-2025-15276

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1187/ 2025-12-31 07:43:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbekdtpkq2z 2026-01-07 17:08:14+00:00| seen|...

CVE-2025-15273

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1191/ 2025-12-31 07:42:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbei4numa2m 2025-12-31 08:57:32+00:00| seen|...

PT-2025-53820

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to parsing PFB files, potentially allowing a remote attacker to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicio...

PT-2025-53827

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to parsing SFD files. The issue is a use-after-free condition resulting from a lack of validation before operating on an object. This can allow a remote...

0day-GigaCage-Webkit

WebKit Gigacage iOS 26.2 Advisory ID: CVE Pending...

CVE-2025-14500

IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling o...

Arbitrary Code Injection

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Arbitrary Code Injection via the convertconfig function. An attacker can execute arbitrary code by supplying a malicious checkpoint file that is process...

CVE-2025-13715

creationtimestamp| type| source ---|---|--- 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1183/...

CVE-2025-68614

creationtimestamp| type| source ---|---|--- 2025-12-22 22:57:33+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1182/...

Energy-Efficient Multi-LLM Reasoning for Binary-Free Zero-Day Detection in IoT Firmware

Securing Internet of Things IoT firmware remains difficult due to proprietary binaries, stripped symbols, heterogeneous architectures, and limited access to executable code. Existing analysis methods, such as static analysis, symbolic execution, and fuzzing, depend on binary visibility and...

Hackers Stole Millions of PornHub Users’ Data for Extortion

Plus: Cisco discloses a zero-day with no available patch, Venezuela accuses the US of a cyberattack, and more...