Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Active exploit activity
Glpi-project Glpi CSRF now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Active exploit activity
Accela Civic Platform cross-site scripting now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information vi...
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.
In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality.
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated att...
Nothing flagged in this category for this digest.
Product: AndroidVersions: Android SoCAndroid ID: A-175402462
elFinder is an open-source file manager for web, written in JavaScript using jQuery UI.