Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Google Skia Out-of-Bounds Write is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Hackerbay Oneuptime SQL injection (CVSS 9.9) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Google Skia Out-of-Bounds Write
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3...
SandboxJS is a JavaScript sandboxing library.
FreeRDP is a free implementation of the Remote Desktop Protocol.
Dagu is a workflow engine with a built-in Web user interface.
Centrifugo is an open-source scalable real-time messaging server.
Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.
OneUptime is a solution for monitoring and managing online services.
Improper Control of Generation of Code ('Code Injection') vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code...
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because a...
The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file typ...