Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Soliton Systems K.K FileZen Command Injection is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical Agentfront Enclave RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Soliton Systems K.K FileZen OS Command Injection
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Parse Dashboard is a standalone dashboard for managing Parse Server apps.
Enclave is a secure JavaScript sandbox designed for safe AI agent code execution.
Parse Dashboard is a standalone dashboard for managing Parse Server apps.
Bugsink is a self-hosted error tracking tool.
OliveTin gives access to predefined shell commands from a web interface.
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.
Flask-Reuploaded provides file uploads for Flask.
The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter a...
The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handl...
RustFS is a distributed object storage system built in Rust.