Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Active exploit activity
Payara Micro Community Directory Traversal now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical Bosch Rexroth Indramotion Mlc L20 Firmware cross-site scripting (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
Nothing flagged in this category for this digest.
The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sendin...
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the pass...
An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of th...
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management.
The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue.
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for templat...
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection t...
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functiona...