Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical Resumes Management And Job Application Website Application Project Resumes Management And Job Application Website Application Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Ec-cube Product Image Bulk Upload privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Exam Reviewer Management System Project Exam Reviewer Management System SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavila...
EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files.
Orckestra C1 CMS is a .NET based Web Content Management System.
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter.
An issue was discovered in EyesOfNetwork (EON) through 5.3.11.
An issue was discovered in EyesOfNetwork (EON) through 5.3.11.