Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Sophos Web Appliance Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Myprestamodules Exportproducts SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Code-projects Simple Crud Functionality SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass
Sophos Web Appliance Command Injection
Oracle Fusion Middleware Unspecified
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop...
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configurat...
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrit...
OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' p...
Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insecure permissions.
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.
An attacker can overwrite any file on the server hosting MLflow without any authentication.
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray da...