Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Active exploit activity
WordPress plugin exposure with public exploit material — mass targeting of internet-facing CMS installs is common once PoCs circulate.
Active exploit activity
Rocket.chat SQL Injection now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical Accusoft Imagegear Buffer Overflow (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injec...
The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the...
Nothing flagged in this category for this digest.
An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9.
OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions.
The QSAN SANOS setting page does not filter special parameters.
QSAN SANOS factory reset function does not filter special parameters.
The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permi...
ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrar...
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.