PULSEUnderground Intel

LIVE39signals / 24h

FEED

ransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomwhitearmor reclama a KTU Shipyard · PH · Transportation

CVE Watch406,106 in full archive

Vulnerabilities exploitable today

406,106in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,764

New KEV · 24H0

Exploit Today ≥ 701,697

Distribution · last window

Critical
5,625
High
21,851
Medium
20,390
Low
2,121

Filters

Filters

Window

Severity

Flags

Vulnerabilities21,521–21,560 · 406,106

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-4994—

——28——CVE-2008-5403—

——28——CVE-2001-1528—

——28——CVE-2007-1867—

——28——CVE-2001-0857—

——28——CVE-2008-0176—

——28——CVE-2021-33501—

——28——CVE-2024-28848—

——28——CVE-2012-4154—

——28——CVE-2014-4616—

——28——CVE-2007-1890—

——28——CVE-2008-5912—

——28——CVE-2022-26706—

——28——CVE-2010-0280—

——28——CVE-2006-4788—

——28——CVE-2017-6637—

——28——CVE-2026-82286.3 MED

——28A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.99d CVE-2015-1903—

——28——CVE-2017-2788—

——28——CVE-2007-2611—

——28——CVE-2024-21006—

——28——CVE-2026-81896.3 MED

——28A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.99d CVE-2003-0290—

——28——CVE-2005-4838—

——28——CVE-2008-4472—

——28——CVE-2015-2155—

——28——CVE-2025-112856.3 MED

——28A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.22d CVE-2013-6343—

——28——CVE-2018-5127—

——28——CVE-2005-3399—

——28——CVE-2006-0701—

——28——CVE-2021-44451—

——28——CVE-2000-09255.0 NO

——28The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.38d CVE-2015-7633—

——28——CVE-2000-0664—

——28——CVE-2010-0742—

——28——CVE-2021-27315—

——28——CVE-2007-2425—

——28——CVE-2010-3126—

——28——CVE-2015-6696—