PULSEUnderground Intel

LIVE34signals / 24h

FEED

ransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomwhitearmor reclama a JB Hunt · US · Transportationransomqilin reclama a Labaid Cancer Hospital And Super Speciality Center · BD · Healthcareransomqilin reclama a Kale Balata A · TR · Agriculture and Food Productionransomqilin reclama a MaxiSeguridad · AR · Professional Servicesransomqilin reclama a Aryza · AR · Technologyransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomwhitearmor reclama a JB Hunt · US · Transportationransomqilin reclama a Labaid Cancer Hospital And Super Speciality Center · BD · Healthcareransomqilin reclama a Kale Balata A · TR · Agriculture and Food Productionransomqilin reclama a MaxiSeguridad · AR · Professional Servicesransomqilin reclama a Aryza · AR · Technology

CVE Watch402,410 in full archive

Vulnerabilities exploitable today

16,719in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,668

Distribution · last window

Critical
3,545
High
15,903
Medium
14,814
Low
1,453

Filters

Filters

Window

Severity

Flags

Vulnerabilities9,681–9,720 · 16,719

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-785299.8 CRI

——7Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.10d CVE-2026-665699.8 CRI

——7Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.10d CVE-2026-665689.8 CRI

——7Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.10d CVE-2026-665679.8 CRI

——8Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.10d CVE-2026-665668.1 HIG

——6Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.10d CVE-2026-665659.8 CRI

——7Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.10d CVE-2026-665649.8 CRI

——7Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.10d CVE-2026-665639.8 CRI

——7Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.10d CVE-2026-664839.8 CRI

——7Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.10d CVE-2026-664829.8 CRI

——7Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.10d CVE-2026-664816.8 MED

——7Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.10d CVE-2026-664805.3 MED

——3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.10d CVE-2026-654597.5 HIG

——6Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.10d CVE-2026-621307.2 HIG

——6Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.10d CVE-2026-621299.9 CRI

——5Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.10d CVE-2026-621259.8 CRI

——7Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.10d CVE-2026-621249.8 CRI

——7Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.10d CVE-2026-621239.8 CRI

——7Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.10d CVE-2026-621209.8 CRI

——7Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.10d CVE-2026-621187.3 HIG

——4Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.10d CVE-2026-621178.5 HIG

——6Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.10d CVE-2026-621167.1 HIG

——2Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.10d CVE-2026-621158.1 HIG

——6Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.10d CVE-2026-621007.1 HIG

——2Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.10d CVE-2026-620998.1 HIG

——6Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.10d CVE-2026-620986.5 MED

——3Unauthenticated Content Injection in Boutique <= 2.3.3 versions.10d CVE-2026-620968.1 HIG

——6Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.10d CVE-2026-620957.1 HIG

——2Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.10d CVE-2026-620948.1 HIG

——6Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.10d CVE-2026-620937.1 HIG

——2Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.10d CVE-2026-620928.1 HIG

——6Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.10d CVE-2026-620917.1 HIG

——2Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.10d CVE-2026-620909.8 CRI

——9Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.10d CVE-2026-620879.8 CRI

——9Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.10d CVE-2026-620869.8 CRI

——9Unauthenticated PHP Object Injection in Juno <= 2.25 versions.10d CVE-2026-620827.1 HIG

——2Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.10d CVE-2026-620779.8 CRI

——9Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.10d CVE-2026-620769.8 CRI

——9Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.10d CVE-2026-620758.1 HIG

——8Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.10d CVE-2026-620748.1 HIG

——8Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.10d