Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
GIGABYTE Multiple Products Privilege Escalation is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Lannerinc Iac-ast2500a Firmware Buffer Overflow (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Lannerinc Iac-ast2500a Firmware Buffer Overflow (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path
GIGABYTE Multiple Products Unspecified
GIGABYTE Multiple Products Privilege Escalation
GIGABYTE Multiple Products Code Execution
GIGABYTE Multiple Products Privilege Escalation
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow...
Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to...
Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow a...
A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to...
Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an...
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements.
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack.
Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker...