Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Active exploit activity
WordPress plugin exposure with public exploit material — mass targeting of internet-facing CMS installs is common once PoCs circulate.
Active exploit activity
Ivanti Avalanche RCE now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3.
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitiv...
A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4.
A vulnerability, which was classified as problematic, has been found in tdevs Hyip Rio 2.1.
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary...
Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more.
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_i...
Nothing flagged in this category for this digest.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.