Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical Uzaybaskul Weighbridge Automation Software SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Eskom E-belediye privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Arubanetworks Arubaos RCE (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighbridge Automation...
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injecti...
Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafte...
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafte...
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafte...
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafte...
There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially craft...
There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially craft...
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5.