Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
DrayTek VigorConnect Path Traversal is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Pingcap Tidb Buffer Overflow (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Seacms SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Kingsoft WPS Office Path Traversal
Draytek VigorConnect Path Traversal
Draytek VigorConnect Path Traversal
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList.
A remote code execution (RCE) vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA.
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del.
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Prefer...
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclu...
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environ...
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two...
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability.
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1.
Memory safety bugs present in Firefox 129.